Cloudfront+S3 for static CDN-ed Website

Given an existing bucket arn:aws:s3:::shop.example.com and an existing wildcard *.example.com ACM arn:aws:acm:us-east-1:444444444444:certificate/e39b2629-45b0-40c7-85fa-c7cd55ca6171 how do I setup the Cloudfront using Terraform?