def get_distribution_endpoint(account_number, cert_id_to_name, distrib_dict):
    """
    Constructs endpoint data from a distribution response, or None if it does
    not represent a distribution Lemur cares about.
    :param account_number:
    :param cert_id_to_name: map of IAM certificate IDs to names
    :param distrib_dict:
    :return: a list of endpoint dictionaries
    """

    cert = distrib_dict["ViewerCertificate"]
    if not cert:
        return None
    # Ignore distributions using the default cert for the cloudfront.net domain
    if cert.get("CloudFrontDefaultCertificate"):
        return None
    # Ignore ACM certificates, since these are auto-rotated
    if cert.get("ACMCertificateArn"):
        return None

    iam_cert_id = cert.get("IAMCertificateId")
    if not iam_cert_id:
        return None

    cert_name = cert_id_to_name.get(iam_cert_id)
    if not cert_name:
        current_app.logger.warning(
            f"get_distribution_endpoints: no IAM certificate with id {iam_cert_id}")
        return None

    policy = dict(
        name='cloudfront-none',
        ciphers=[]
    )
    minimum_version = cert.get("MinimumProtocolVersion")
    if minimum_version:
        policy = dict(
            name=f"cloudfront-%{minimum_version}",
            ciphers=[minimum_version]
        )

    aliases = []
    if "Aliases" in distrib_dict and "Items" in distrib_dict["Aliases"]:
        aliases = distrib_dict["Aliases"]["Items"]

    return dict(
        name=distrib_dict["Id"],
        dnsname=distrib_dict["DomainName"],
        aliases=aliases,
        type="cloudfront",
        port=443,
        certificate_name=cert_name,
        policy=policy,
    )

    Constructs endpoint data from a distribution response, or None if it does
    not represent a distribution Lemur cares about.
    :param account_number:
    :param cert_id_to_name: map of IAM certificate IDs to names
    :param distrib_dict:
    :return: a list of endpoint dictionaries
    
lemur/plugins/lemur_aws/plugin.py