Rewrite using cfndsl

Changes:
 - use CNAME rather than A record to point to the loadbalancer
 - switched to an internal loadbalancer

Change-Id: I0784b54a4de550a51adc09a343d9f6c19d127dd1