cloud front 504 error

I use CloudFront to associate s3 and alb to publish applications, but 504 errors often occur when accessing applications. I confirmed that the Action in my waf is allowed, and the security group of alb also allows inbound traffic from CloudFront. Is there any other reason? Could it be caused by the certificate of the alb listener？