My bad, CloudFront distributions require ACM certificates to be in the us-east-1 region, but other uses (ELB) require the certificate to be in THEIR region.