don't need to invalidate since we don't ever use our cloudfront links