Cloudlift

Installation of cloudlift was intermittently failing in some environments due to the awscli version not being correctly resolved.

Cloudlift will now disallow modifying services that were created by a newer version of cloudlift. This ensures that features added by the new version are not removed by the old version.

`pip install -U cloudlift`

The `upload_to_ecr` functionality broke with the recent refactor that removed hardcoded aws regions. Now `upload_to_ecr` relies on the region specfied in the AWS account invoking cloudlift to determine the region for ECR.

Now you can specify custom `health_check_path` in the service definition.

With this update, new and existing ALB Listeners will use TLS 1.2

https://hacks.mozilla.org/2020/02/its-the-boot-for-tls-1-0-and-tls-1-1/

Now relying on AWS Parameter store to complain about violations.
Maintaining our own whitelist was becoming too much work.