I've written a little Serverless app that uses API Gateway and Lambda to expose an API to invalidate a CloudFront distribution.

Handy to have something like this in a build pipeline.

Code here