CloudFront Now Natively Secures S3 Multi-Region Access Points
Amazon CloudFront now supports Origin Access Control (OAC) for S3 Multi-Region Access Points, letting you protect your origins without custom Lambda@Edge functions. This means faster cache-miss fills from the nearest region and simplified security setup—available worldwide except China.
source: [aws/whats-new]