Support multiple regions - particularly CloudFront certificates (via stacks?)

Since CloudFormation is tied to a single region, if I want to deploy in somewhere like `ap-southeast-2` then I'm unable to do things within the same template for a different region (eg. `us-east-1`). This becomes an issue when I want to create a certificate for a non-regional CloudFront distribution (which has to be created in `us-east-1`), certificates in non-regional API Gateway, etc.

I expect it would be possible to do this using stacks and exports (or manually.. of course), but not sure if/how I would do this in a 'SAM friendly' way.

If this is already possible, perhaps some documentation/an example of how to do this would be useful?

My current workaround is just to use regional certificates for API Gateway.