Update to the CloudFront Origins is missing a CustomHeader that will cause issues. The key is required, but no data needs to be filled in. You can add the following line to 475 to make it work properly:
'CustomHeaders': {u'Quantity': 0}
References: https://github.com/ubergeek42/lambda-letsencrypt/blob/master/lambda_function.py#L469-L474