ELB subnets, cloudfront behavior, and bucketnames

 for instance roles