Consider a CDN abstraction
For LM, we expect to maintain their pattern of putting a CloudFront distribution in front of their LoadBalancers. We should consider a CDN abstraction in the Cloud Framework that would abstract over this in a cross-cloud-compatible way.
We added a CDN abstraction for the LM customer workload. We should look at whether we can generalize this into something we put in either (a) the @pulumi/cloud framework or at least (b) the @pulumi/aws-infrastructure package.
https://github.com/pulumi/learningmachine-cts/blob/pulumi_aspnetcore/tool/pulumi/cdn.ts https://github.com/pulumi/learningmachine-cts/blob/pulumi_aspnetcore/tool/pulumi/waf.ts
We'll need to review how much of the functionality there can be exposed in a safely cross-platform way. Having an SSL abstraction (https://github.com/pulumi/pulumi-cloud/issues/192) will be important here - the one explicit AWS dependency in the current code is a Certificate ARN.