Amazon Cloudfront to AWS Lambda URLs with IAM Auth
Amazon CloudFront → Lambda@Edge → AWS Lambda Function URLs
Configure Amazon CloudFront to point to an AWS Lambda function via a Lambda URL with IAM authentication
An Amazon CloudFront distribution is created that forwards requests to the domain name of the deployed AWS Lambda function URL. Amazon CloudFront also caches responses from the Lambda function.
The Lambda URL is protected by IAM authentication via CloudFront and Lambda@Edge.
Amazon CloudFront also allows for custom domain names, Lambda@Edge to authenticate with Cognito, as well as AWS Web Application Firewall (WAF) and AWS Shield Advanced to protect your endpoint from attacks