@ian I think the sticking point looking at this is that I'm managing the DNS for skrasek.us through DigitalOcean, which I think will prevent me from the CloudFront route.