diff --git a/cloudformation/main.yml b/cloudformation/main.yml
index 88326e17..2e66360b 100644
--- a/cloudformation/main.yml
+++ b/cloudformation/main.yml
@@ -678,6 +678,7 @@ Resources:
     Type: AWS::CloudFront::Distribution
     Properties:
       DistributionConfig:
+        HttpVersion: 'http2and3'
         Origins:
           - Id: S3WebsiteOrigin
             DomainName: !GetAtt AppFrontendS3Bucket.RegionalDomainName
@@ -699,6 +700,7 @@ Resources:
             - UiDomainName
 
         DefaultCacheBehavior:
+          Compress: true
           TargetOriginId: S3WebsiteOrigin
           ViewerProtocolPolicy: redirect-to-https
           AllowedMethods:
@@ -732,6 +734,7 @@ Resources:
               - HEAD
             CachePolicyId: !Ref CloudfrontCachePolicy
             OriginRequestPolicyId: 216adef6-5c7f-47e4-b989-5492eafa07d3
+            Compress: true
           - PathPattern: "/api/v1/organizations"
             TargetOriginId: ApiGatewayOrigin
             ViewerProtocolPolicy: redirect-to-https
@@ -748,6 +751,7 @@ Resources:
               - HEAD
             CachePolicyId: "658327ea-f89d-4fab-a63d-7e88639e58f6"
             OriginRequestPolicyId: 216adef6-5c7f-47e4-b989-5492eafa07d3
+            Compress: true
           - PathPattern: "/api/documentation*"
             TargetOriginId: ApiGatewayOrigin
             ViewerProtocolPolicy: redirect-to-https
@@ -764,6 +768,7 @@ Resources:
               - HEAD
             CachePolicyId: "658327ea-f89d-4fab-a63d-7e88639e58f6"
             OriginRequestPolicyId: 216adef6-5c7f-47e4-b989-5492eafa07d3
+            Compress: true
           - PathPattern: "/api/*"
             TargetOriginId: ApiGatewayOrigin
             ViewerProtocolPolicy: redirect-to-https
@@ -780,6 +785,7 @@ Resources:
               - HEAD
             CachePolicyId: 4135ea2d-6df8-44a3-9df3-4b5a84be39ad # caching disabled
             OriginRequestPolicyId: 216adef6-5c7f-47e4-b989-5492eafa07d3
+            Compress: true
         ViewerCertificate:
           AcmCertificateArn: !FindInMap
             - ApiGwConfig
@@ -787,7 +793,6 @@ Resources:
             - EnvCertificateArn
           MinimumProtocolVersion: TLSv1.2_2021
           SslSupportMethod: sni-only
-        HttpVersion: http2
         PriceClass: PriceClass_100
 
   AppFrontendS3BucketPolicy:
@@ -860,6 +865,7 @@ Resources:
     Type: AWS::CloudFront::Distribution
     Properties:
       DistributionConfig:
+        HttpVersion: 'http2and3'
         Origins:
           - Id: ApiGatewayOrigin
             DomainName: !Sub "${AppApiGateway}.execute-api.${AWS::Region}.amazonaws.com"
@@ -878,6 +884,7 @@ Resources:
                 - !Ref RunEnvironment
                 - EnvDomainName
         DefaultCacheBehavior:
+          Compress: true
           TargetOriginId: ApiGatewayOrigin
           ViewerProtocolPolicy: redirect-to-https
           AllowedMethods:
@@ -904,7 +911,6 @@ Resources:
             - EnvCertificateArn
           MinimumProtocolVersion: TLSv1.2_2021
           SslSupportMethod: sni-only
-        HttpVersion: http2
         PriceClass: PriceClass_100
 
   LinkryRecordsCloudfrontStore:
@@ -962,6 +968,7 @@ Resources:
     Type: AWS::CloudFront::Distribution
     Properties:
       DistributionConfig:
+        HttpVersion: 'http2and3'
         Enabled: true
         DefaultCacheBehavior:
           ViewerProtocolPolicy: redirect-to-https
@@ -993,7 +1000,6 @@ Resources:
             - EnvCertificateArn
           MinimumProtocolVersion: TLSv1.2_2021
           SslSupportMethod: sni-only
-        HttpVersion: http2
         PriceClass: PriceClass_100
 
   LinkryDomainProxy: