CloudFront Now Delivers IPv6 Traffic Directly to Private VPC Origins
Amazon CloudFront just dropped dual-stack support for VPC origins, meaning you can now route IPv6 traffic end-to-end to your private load balancers and EC2 instances without exposing them to the internet. No more choosing between IPv6 compliance and security—this feature is live across all AWS Commercial Regions where VPC origins work, and it won't cost you extra.
source: [aws/whats-new]