CloudFront Adds Origin mTLS Authentication for End-to-End Zero Trust

Steef-Jan Wiggers — Wed, 11 Feb 2026 10:17:00 GMT

Amazon CloudFront now supports mutual TLS authentication for origin servers, completing end-to-end zero-trust authentication from viewers to backends. The feature replaces IP allowlists and shared secrets with cryptographic verification, proving particularly valuable for multi-cloud deployments, where origins can verify that traffic originated from CloudFront without VPN tunnels.

By Steef-Jan Wiggers

InfoQ - Zero Trust

CloudFront Adds Origin mTLS Authentication for End-to-End Zero Trust