A new AWS CDK L2 construct for Amazon CloudFront Origin Access Control (OAC)
DevOps & Developer Productivity Blog
This article introduces a new AWS Cloud Development Kit (CDK) Level 2 construct for Amazon CloudFront Origin Access Control (OAC). OAC is a recommended way to secure Amazon S3 CloudFront origins, offering additional security features compared to the legacy Origin Access Identity (OAI).
Specifically, the article covers:
- Background on CloudFront, S3 origins, and the benefits of using OAC over OAI
- How to use the new L2 OAC construct with examples for standard S3 origins and customer-managed KMS encryption
- Considerations for migrating from OAI to OAC using the new construct, including a multi-step deployment process to avoid downtime
- Conclusion highlighting the key benefits of the new OAC construct, such as simplified configuration, KMS support, customization options, and easier migration from OAI
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.