it's not the same thing TBH, and even then it's advised to place a cloudfront distribution before the lambda. see https://aws.amazon.com/blogs/networking-and-content-delivery/secure-your-lambda-function-urls-using-amazon-cloudfront-origin-access-control/