This message was deleted.

As far as I'm aware that doesn't exist. You need to give the full cloudfront configuration when you create/update the distribution. One pattern I've used in those cases is move the resource(cloudfront in this case) to another layer. Each stack that needs to add behaviours/origins creates some kind of configuration somewhere central like ssm/s3. The cloudfront layer then fetches that and uses it as part of its create/update.

Cheers for the suggestion, most likely will end up implementing that or otherwise restructuring the project to avoid the problem