Skip to content

CloudFront  >  Operations  >  create_origin_access_control

create_origin_access_control

Operation

create_origin_access_control async

create_origin_access_control(input: CreateOriginAccessControlInput, plugins: list[Plugin] | None = None) -> CreateOriginAccessControlOutput

Creates a new origin access control in CloudFront. After you create an origin access control, you can add it to an origin in a CloudFront distribution so that CloudFront sends authenticated (signed) requests to the origin.

This makes it possible to block public access to the origin, allowing viewers (users) to access the origin's content only through CloudFront.

For more information about using a CloudFront origin access control, see Restricting access to an Amazon Web Services origin in the Amazon CloudFront Developer Guide.

Parameters:

Name Type Description Default
input CreateOriginAccessControlInput

An instance of CreateOriginAccessControlInput.

required
plugins list[Plugin] | None

A list of callables that modify the configuration dynamically. Changes made by these plugins only apply for the duration of the operation execution and will not affect any other operation invocations.

None

Returns:

Type Description
CreateOriginAccessControlOutput

An instance of CreateOriginAccessControlOutput.

Input

CreateOriginAccessControlInput dataclass

Bases: _SerdeShape

Dataclass for CreateOriginAccessControlInput structure.

Attributes

origin_access_control_config class-attribute instance-attribute
origin_access_control_config: OriginAccessControlConfig | None = ...

Contains the origin access control.

Output

CreateOriginAccessControlOutput dataclass

Bases: _SerdeShape

Dataclass for CreateOriginAccessControlOutput structure.

Attributes

e_tag class-attribute instance-attribute
e_tag: str | None = ...

The version identifier for the current version of the origin access control.

location class-attribute instance-attribute
location: str | None = ...

The URL of the origin access control.

origin_access_control class-attribute instance-attribute
origin_access_control: OriginAccessControl | None = ...

Contains an origin access control.

response_metadata class-attribute instance-attribute
response_metadata: ResponseMetadata = ...

Metadata about the response that produced this output. Use this to recover the request identifiers a service's support team needs in order to investigate a call. Members of the metadata are individually optional.