Amazon CloudFront announces mutual TLS support for origins
News
This article announces mutual TLS (mTLS) support for Amazon CloudFront origins, enabling certificate-based authentication to verify requests come only from authorized CloudFront distributions.
- Eliminates need for custom authentication solutions like shared secrets or IP allow-lists
- Provides cryptographic verification of CloudFront identity to origin servers
- Reduces operational overhead for secret rotation and access list management
- Supports certificates from AWS Private CA or third-party Certificate Authorities
- Works with ALB, API Gateway, on-premises, and custom origins
- Configurable via Console, CLI, SDK, CDK, or CloudFormation
- No additional charge for this feature
CloudFront origin mTLS simplifies secure origin authentication by replacing custom security controls with standardized certificate-based verification.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.