Module provider 

CloudFront provider — owns the store and implements every operation.

Operations are grouped by resource kind. Each mutating op follows the same skeleton:

1. Look up the resource (or fail with the appropriate NoSuch*).
2. Check If-Match for Update/Delete (or fail PreconditionFailed).
3. Mutate, bump ETag, update last_modified_time.
4. Spawn propagation simulator if this is a distribution/invalidation.

The ETag model is monotonic: every successful mutation generates a brand new opaque token. ETags are never reused.

Structs

RustackCloudFront

Main provider.