AWS – Amazon CloudFront now supports Origin Access Control (OAC) for Lambda function URL origins
Starting today, customers can protect their AWS Lambda URL origins by using CloudFront Origin Access Control (OAC) to only allow access from designated CloudFront distributions.
Read More for the details.