URL Encode CloudFront invalidation paths

When syncing to a CloudFront source S3 bucket, object paths aren't encoded during the invalidate request resulting in a 400.