You can use a Lambda function to update the security group’s rules dynamically whenever AWS publishes new internal service IP ranges for CloudFront.
How to test Firebase Cloud Messaging (FCM) Push Notification to Android devices using POSTMAN and AWS Simple Notification Service (SNS)
Using POSTMAN you can test the FCM Push Notification messages to your android app client. Also AWS SNS service can be configured to send Push Notification messages to Android App devices.
If you don’t have Mac Desktop or keychain access, you can use openssl to create p12 certificate in windows for iOS push notification or distribution