Invalidate CloudFront from CodePipeline

codebuild.yaml

  InvalidateCacheProject:
    Type: AWS::CodeBuild::Project
    Properties:
      Artifacts:
        Type: CODEPIPELINE
      Environment:
        ComputeType: BUILD_GENERAL1_SMALL
        Image: aws/codebuild/standard:2.0
        Type: LINUX_CONTAINER
      Name: !Sub ${AWS::StackName}-invalidate-cache
      ServiceRole: !GetAtt InvalidateCacheRole.Arn
      Source:
        Type: CODEPIPELINE
        BuildSpec: |
          version: 0.2
          env:
            parameter-store:
              # NOTE: Using here avoids circular dependency
              DISTRIBUTION_ID: /my/distribution/id
          phases:
            post_build:
              commands:
                - aws cloudfront create-invalidation \
                  --distribution-id ${DISTRIBUTION_ID} \
                  --paths '/*'

codepipeline.yaml

        - Name: InvalidateCache
          Actions:
            - Name: InvalidateCache
              ActionTypeId:
                Category: Build
                Owner: AWS
                Provider: CodeBuild
                Version: "1"
              Configuration:
                ProjectName: !Ref InvalidateCacheProject