CloudFront Now Routes Lambda Web Functions Through Its Global Edge Network
AWS just unlocked a neat trick: you can now serve Lambda Web Functions through CloudFront's worldwide edge locations, getting TLS termination, caching, and DDoS protection straight out of the box—no code changes needed. Origin Access Control locks things down so only CloudFront can reach your Lambda function, and you can layer AWS WAF on top for extra security.
source: [aws/whats-new]