# Restrict access to an Amazon origin
<a name="private-content-restricting-access-to-origin"></a>

You can configure CloudFront and some Amazon origins in a way that provides the following benefits:
+ Restricts access to the Amazon origin so that it's not publicly accessible.
+ Makes sure that viewers (users) can access the content in the Amazon origin only through the specified CloudFront distribution. This prevents viewers from accessing the content directly from the origin, or through an unintended CloudFront distribution.

To do this, configure CloudFront to send authenticated requests to your Amazon origin, and configure the Amazon origin to only allow access to authenticated requests from CloudFront. For more information, see following topics for compatible types of Amazon origins.

**Topics**
+ [Restrict access to an AWS Elemental MediaPackage v2 origin](private-content-restricting-access-to-mediapackage.md)
+ [Restrict access to an AWS Elemental MediaStore origin](private-content-restricting-access-to-mediastore.md)
+ [Restrict access to an Amazon Lambda function URL origin](private-content-restricting-access-to-lambda.md)
+ [Restrict access to an Amazon S3 origin](private-content-restricting-access-to-s3.md)
+ [Restrict access with VPC origins](private-content-vpc-origins.md)