Why is it so expensive to add SSL with a custom domain to Amazon CloudFront? Because Amazon actually needs to acquire hundreds of individual certificates on your behalf and distribute them to its edge servers.

No they don't, you provide them with a single cert and they use that on every edge node.

SSL requires additional CPU resources, and is often coupled with hardware acceleration. All of this equates to higher hosting costs.

What is what so expensive?