I have AWS CloudFront serving content (from EC2/etc), this works fine. The content I have is 'multi-tenant' in that it adjusts its branding/theme based on the domain being used. In theory I would just want to have a single CloudFront distro serving all the different domains.
The issue is that CloudFront only supports a single certificate per distro. I need all the sites to be secure (as HTTP is essentially deprecated). Also I need to easily support scaling to hundreds or even thousands of domains!
I can use a SAN certificate to have multiple domains per certificate, but there are limits that certificate authorities impose (plus it is generally suggested that certificates not be too large), and would be a maintenance hassle when adding/removing domains.
So how to manage many secure domains (possibly 1000+) with CloudFront? It seems to be impossible without creating a new distro per certificate :/
I could try to create my own CDN, which is a non-trivial project that I don't have time for. Alternatively, I hear some CDNs (CloudFlare) charge exorbitant rates for multi-cert distros - but they seem too expensive, plus I'd rather stick with AWS since everything else I have is there.