ported custom provisioning to use cloudfront