Restrict access to an AWS Lambda function URL origin - Amazon CloudFront
Restrict access to an AWS Lambda function URL with Amazon CloudFront origin access control (OAC).