CloudFront distributions using origin access identity should be migrated to origin access control

cloudfront
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

CloudFront distributions using Origin Access Identity (OAI) should be migrated to Origin Access Control (OAC) for enhanced security features, including signed requests, granular permissions, and support for AWS Identity and Access Management (IAM) policies. Additionally, OAC offers broader compatibility with various AWS origins, such as S3 and custom origins, enhancing both flexibility and security.

Remediation

For guidance on migrating legacy OAI to OAC, refer to the Migrating from origin access identity (OAI) to origin access control (OAC) section of the Amazon CloudFront Developer Guide.