Amazon CloudFront announces dual-stack support for VPC origins

Amazon CloudFront now offers dual-stack VPC origins, supporting end-to-end IPv6 delivery to origins within Amazon VPC. This allows customers to place Application Load Balancers, Network Load Balancers, and EC2 instances in private subnets, accessible only by CloudFront distributions. Dual-stack support enables IPv6 traffic to private origins, meeting IPv6 architecture and compliance requirements without exposing origins to the internet. Previously, CloudFront supported dual-stack for public origins but only IPv4 for VPC origins, forcing customers to choose between moving origins to public subnets or compromising security. This announcement lets customers configure VPC origins as dual-stack, enabling end-to-end IPv6 without sacrificing security. Dual-stack VPC origins are available in all AWS commercial regions where VPC origins are supported, at no additional cost.

Why it matters

This update affects users who need to send IPv6 traffic to private origins within their VPC. It helps meet IPv6 architecture and regulatory requirements while maintaining security.