SourceAmazon CloudFront now supports Origin Access Control (OAC) for Amazon S3 Multi-Region Access Points
Amazon CloudFront now supports Origin Access Control (OAC) for Amazon S3 Multi-Region Access Points (MRAP). This allows customers to restrict access to these origins exclusively to designated CloudFront distributions.
Why it matters
Developers can secure multi-region content delivery without writing custom code, reducing setup complexity and improving performance for global users.
The details
- Native signing replaces the need for custom Lambda@Edge functions.
- The feature is available worldwide except in the CloudFront China region.
- There are no additional fees associated with this new feature.
Show entities and relationshipsHide entities and relationships
In this article
Topics
Products
Companies
Countries
Key connections
Amazon owns Amazon S3 Multi-Region Access Points (MRAP)
Amazon provides Amazon S3 Multi-Region Access Points for global routing across buckets.
Amazon owns Lambda@Edge
Amazon develops and offers Lambda@Edge serverless computing.
Amazon owns AWS CloudFormation
Amazon provides AWS CloudFormation for infrastructure as code management.
Amazon CloudFront uses Amazon S3 Multi-Region Access Points (MRAP)
CloudFront natively signs requests to Amazon S3 Multi-Region Access Points origins.
Amazon CloudFront uses Origin Access Control (OAC)
CloudFront supports Origin Access Control to restrict origin access to designated CloudFront distributions.
Amazon S3 Multi-Region Access Points (MRAP) uses Origin Access Control (OAC)
Amazon S3 MRAP origins can be protected using CloudFront Origin Access Control.
Show 5 more connectionsShow fewer connections
Amazon CloudFront uses Asymmetric Signature Version 4 (SigV4a)
CloudFront natively signs requests using Asymmetric Signature Version 4 (SigV4a) to S3 MRAP origins.
Lambda@Edge uses Asymmetric Signature Version 4 (SigV4a)
Previously, custom Lambda@Edge functions were used to compute and forward SigV4a authorization headers.
Amazon S3 Multi-Region Access Points (MRAP) is related to Amazon S3
Multi-Region Access Points route requests to replicated Amazon S3 buckets across regions.
AWS CloudFormation is related to Amazon CloudFront
CloudFormation can be used to enable OAC when configuring Amazon S3 MRAP endpoints with CloudFront.
Amazon CloudFront is related to China
CloudFront OAC support for Amazon S3 MRAP origins is available worldwide except in the CloudFront China region.
Related events
Amazon CloudFront Adds Origin Access Control Support for Amazon S3 Multi-Region Access Points
Get the weekly recap
The stories like this one, picked and explained — once a week, straight to your inbox.