SourceAmazon CloudFront now supports Origin Access Control (OAC) for Amazon S3 Multi-Region Access Points
Developers can secure multi-region content delivery without writing custom code, reducing setup complexity and improving performance for global users.
- CloudFront Origin Access Control (OAC) can now restrict access to Amazon S3 Multi-Region Access Points (MRAP) origins to designated CloudFront distributions.
- CloudFront natively signs requests to S3 MRAP origins using Asymmetric Signature Version 4 (SigV4a), eliminating the need for custom Lambda@Edge functions.
- Requests automatically route to the nearest replicated S3 bucket across regions during cache misses, improving latency and resilience.
- The feature is available globally across all CloudFront regions except China at no additional charge.
- OAC for S3 MRAP endpoints can be enabled via the CloudFront Console, SDK, CLI, or AWS CloudFormation.