CloudFront OAC now natively supports S3 Multi-Region Access Points as origins
Amazon CloudFront now allows customers to use Origin Access Control (OAC) to secure Amazon S3 Multi-Region Access Points (MRAP) as origins. This enhancement simplifies protecting global content delivery, eliminating the prior need for custom Lambda@Edge functions to compute SigV4a authorization headers for MRAP. The native integration improves performance for cache-miss fills and enhances resilience for globally distributed users. This feature is generally available worldwide, excluding the CloudFront China region, and incurs no additional fees.
Features (1) ›
- CloudFront OAC supports S3 Multi-Region Access Points
CloudFront's Origin Access Control (OAC) now natively signs requests to S3 Multi-Region Access Points (MRAP) origins, allowing customers to restrict access to designated CloudFront distributions. This eliminates the previous requirement for custom Lambda@Edge functions to compute Asymmetric Signature Version 4 authorization headers. Customers benefit from faster cache-miss fills from the nearest region, enhanced security, and simplified configuration via CloudFront Console, SDK, CLI, or CloudFormation.
https://aws.amazon.com/about-aws/whats-new/2026/08/amazon-cloudfront-oac-s3-mrap
Related releases
- Amazon Redshift now offers long-term system table retention via S3 Tables AWS What's New ·
- Amazon Redshift adds long-term system table retention with S3 Tables AWS Big Data Blog ·
- SageMaker AI Studio Adds Generative AI Inference Recommendations for Optimized Deployments AWS What's New ·
- Amazon Bedrock now supports SpaceXAI Grok 4.6 with Cross-Region Inference AWS What's New ·
- Amazon Bedrock now supports OpenAI GPT-5.6 models in India AWS What's New ·
- Amazon S3 Metadata and Annotations Now Available in AWS GovCloud (US) Regions AWS What's New ·