How to encrypt data before to serve to users in AWS CloudFront

I want to encrypt the data sent to users ( specifically a file) from AWS CloudFront, I don't know if it's possible to do that.

Currently, all users can retrieve resources from my CloudFront url, then share or copy them, and I don't want them to share or copy them. What's the solution for this ?

I've thought of encrypting the data before serving it to users, then when it arrives in the user's app, my app can decrypt and read it.