Make that default behavior of CloudFront distribution. See: https://aws.amazon.com/premiumsupport/knowledge-center/redirect-domain-route-53/ (plus another CloudFront distro in front to handle possible HTTPS traffic).