- CloudFront now natively signs requests to Amazon S3 Multi-Region Access Points using Origin Access Control, eliminating the need for custom Lambda@Edge SigV4a signing
- Enables faster cache‑miss fills from the nearest replicated bucket and restricts access to designated CloudFront distributions
- Feature is available globally (except China) with no extra cost