Fast and seamless integration with Keycloak via a standard OpenID client. No CloudFront Function or Lambda@Edge required (native protection via signed cookies). Protect an entire distribution (assets, ...