Amazon announced that CloudFront now supports Origin Access Control (OAC) for Amazon S3 Multi-Region Access Points (MRAP), allowing customers to secure access to S3 origins without custom SigV4a signature code.

Key Details

• CloudFront Origin Access Control (OAC) can now restrict access to Amazon S3 Multi-Region Access Points (MRAP) origins to designated CloudFront distributions.
• CloudFront natively signs requests to S3 MRAP origins using Asymmetric Signature Version 4 (SigV4a), eliminating the need for custom Lambda@Edge functions.
• Requests automatically route to the nearest replicated S3 bucket across regions during cache misses, improving latency and resilience.
• The feature is available globally across all CloudFront regions except China at no additional charge.
• OAC for S3 MRAP endpoints can be enabled via the CloudFront Console, SDK, CLI, or AWS CloudFormation.

In This Story