For now it's an invokable as it does not have any dependencies. It'll likely become a factory too if I need CloudFront client to generate a signed URL.