Amazon CloudFront now supports Origin Access Control (OAC) for Lambda function URL origins

Starting today, customers can protect their AWS Lambda URL origins by using CloudFront Origin Access Control (OAC) to only allow access from designated CloudFront distributions. 

Source:: Amazon AWS