[WIP] Add custom-policy generation for CloudFront.

@andreadipersio Not finished but wanted to run it by you to see if you think this is the right direction.