[{"data":1,"prerenderedAt":59},["ShallowReactive",2],{"pattern-cloudfront-s3-oac-sam":3},{"id":4,"title":5,"architectureURL":6,"cleanup":7,"contributors":10,"deploy":12,"description":15,"extension":16,"framework":17,"gitHub":18,"highlight":6,"introBox":24,"language":29,"level":30,"meta":31,"patternArch":32,"resources":46,"s3URL":6,"services":6,"stem":54,"testing":55,"videoId":6,"__hash__":58},"patterns\u002Fpatterns\u002Fcloudfront-s3-oac-sam.json","Amazon CloudFront to Amazon S3 secured with OAC",null,{"text":8},[9],"Delete the stack: \u003Ccode>sam delete\u003C\u002Fcode>.",[11],"content\u002Fcontributors\u002Fnathan-j-lichtenstein.json",{"text":13},[14],"sam deploy","Create a CloudFront distribution with an S3 origin secured with origin access control (OAC).","json","AWS SAM",{"template":19},{"repoURL":20,"templateURL":21,"projectFolder":22,"templateFile":23},"https:\u002F\u002Fgithub.com\u002Faws-samples\u002Fserverless-patterns\u002Ftree\u002Fmain\u002Fcloudfront-s3-oac-sam","serverless-patterns\u002Fcloudfront-s3-oac-sam","cloudfront-s3-oac-sam","template.yaml",{"headline":25,"text":26},"How it works",[27,28],"This sample project demonstrates how to deploy a CloudFront distribution with an S3 origin that is secured with origin access control (OAC). Compared to the older origin access identity (OAI) method OAC offers enhanced security practices, comprehensive HTTP methods support, and supports objects encrypted with SSE-KMS.","This pattern deploys one CloudFront distribution and one S3 Bucket.","YAML","200",{},{"icon1":33,"icon2":38,"line1":42},{"x":34,"y":35,"service":36,"label":37},20,50,"cloudfront","Amazon CloudFront",{"x":39,"y":35,"service":40,"label":41},80,"s3","Amazon S3",{"from":43,"to":44,"label":45},"icon1","icon2","",{"bullets":47},[48,51],{"text":49,"link":50},"Amazon CloudFront introduces Origin Access Control (OAC)","https:\u002F\u002Faws.amazon.com\u002Fblogs\u002Fnetworking-and-content-delivery\u002Famazon-cloudfront-introduces-origin-access-control-oac\u002F",{"text":52,"link":53},"Amazon CloudFront - Developer Guide - Restricting access to an Amazon S3 origin","https:\u002F\u002Fdocs.aws.amazon.com\u002FAmazonCloudFront\u002Flatest\u002FDeveloperGuide\u002Fprivate-content-restricting-access-to-s3.html","patterns\u002Fcloudfront-s3-oac-sam",{"text":56},[57],"See the GitHub repo for detailed testing instructions.","_y1W68hjXnl93KY2xfwKeRxBq_1N88vjVz_aP0dXlzA",1778846883820]