---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# aws_cloudfront_origin_access_control{% #aws_cloudfront_origin_access_control %}

## `account_id`{% #account_id %}

**Type**: `STRING`

## `cloudfront_origin_access_control_arn`{% #cloudfront_origin_access_control_arn %}

**Type**: `STRING`

## `description`{% #description %}

**Type**: `STRING`**Provider name**: `Description`**Description**: A description of the origin access control.

## `id`{% #id %}

**Type**: `STRING`**Provider name**: `Id`**Description**: The unique identifier of the origin access control.

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `Name`**Description**: A unique name that identifies the origin access control.

## `origin_access_control_origin_type`{% #origin_access_control_origin_type %}

**Type**: `STRING`**Provider name**: `OriginAccessControlOriginType`**Description**: The type of origin that this origin access control is for.

## `signing_behavior`{% #signing_behavior %}

**Type**: `STRING`**Provider name**: `SigningBehavior`**Description**: A value that specifies which requests CloudFront signs (adds authentication information to). This field can have one of the following values:

- `never` – CloudFront doesn't sign any origin requests.
- `always` – CloudFront signs all origin requests, overwriting the `Authorization` header from the viewer request if necessary.
- `no-override` – If the viewer request doesn't contain the `Authorization` header, CloudFront signs the origin request. If the viewer request contains the `Authorization` header, CloudFront doesn't sign the origin request, but instead passes along the `Authorization` header that it received in the viewer request.



## `signing_protocol`{% #signing_protocol %}

**Type**: `STRING`**Provider name**: `SigningProtocol`**Description**: The signing protocol of the origin access control. The signing protocol determines how CloudFront signs (authenticates) requests. The only valid value is `sigv4`.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`