=== ORIGIN: AWS BACKEND ===

remote_addr (TCP peer): 10.200.0.183
X-Forwarded-For:        '216.73.216.40'
X-Amz-Cf-Id:            ''
Host:                   demo-cf.cf-saas.demotw.com
SNI:                    
TLS:                    TLSv1.3 / TLS_AES_128_GCM_SHA256
Time:                   2026-08-13T10:01:30+00:00

This is Origin A (AWS). If you see X-Amz-Cf-Id, traffic arrived via CloudFront.
If XFF is populated, traffic arrived via a terminating edge (ALB or CloudFront).