How to Use Cloudfront for Sendgrid Click Tracking

Nothing like a Cloudflare outage to inspire another blog post. I learned from the last incident and was able to turn off the CF proxy early on while it was still possible to do so. This kept my website up during most of the outage as requests were bypassing CF and hitting my origin servers directly.
However, in turning off the CF proxy, I noticed one flaw in my infrastructure. When I turned off the CF proxy for links.mydomain.com, which is the subdomain I use to wrap links in outgoing emails, any user who clicked a link in our emails saw a SSL certificate not valid error.
In this post, I d...