Amazon CloudFront announces support for mutual TLS authentication

Amazon CloudFront Mutual TLS Authentication

Amazon CloudFront now supports mutual TLS Authentication (mTLS), a security protocol that requires both the server and client to authenticate each other using X.509 certificates. This enables customers to validate client identities at CloudFront's edge locations, helping protect against unauthorized access and security threats.

Previously, customers had to implement and maintain their own client access management solutions. Now, with mutual TLS, customers can easily validate client identities at the AWS edge before connections are established with their application servers or APIs.

Example use cases include:

• B2B secure API integrations for enterprises
• Client authentication for IoT

Customers can configure mutual TLS with CloudFront using the AWS Management Console, CLI, SDK, CDK, and CloudFormation. For detailed implementation guidance and best practices, visit the CloudFront Mutual TLS (viewer) documentation.

Mutual TLS authentication is available to all CloudFront customers at no additional cost.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.