CloudFront adds support for AWS Lambda Web Functions as origins

AWS now lets Lambda Web Functions serve as origins for CloudFront, delivering serverless web apps through its global edge network without code changes. Origin Access Control restricts direct access, while caching, custom domains with managed TLS and AWS WAF work out of the box.

• The integration launched on October 12, 2026, with no application code changes required
• OAC requires IAM authentication on the endpoint and sigv4 signing
• Direct endpoint requests returned 403; requests via CloudFront returned 200 OK
• Access policy uses aws:SourceArn to bind the origin to a specific distribution