Google Cloud offers Identity Aware Proxy and AWS offers Cognito integration with their Application Load Balancers which can do this.
https://awslabs.github.io/aws-cloudfront-extensions/deploy/d...
https://aws.amazon.com/blogs/security/protect-public-clients...