Thanks for that, that's actually really useful - though I don't use cloudformation yet so I'd have to learn enough of that to put this into action.

Love that you have to just happen to know about "1b511abead59c6ce207077c0bf0e0043b1382612" as the magical "known thumbprint" for GitHub!