Skip to content

CloudFront  >  Structures  >  OriginAccessControlSummary

OriginAccessControlSummary

Structure Class

OriginAccessControlSummary dataclass

Bases: _SerdeShape

A CloudFront origin access control.

Attributes

description instance-attribute 
description: str

A description of the origin access control.

id instance-attribute 
id: str

The unique identifier of the origin access control.

name instance-attribute 
name: str

A unique name that identifies the origin access control.

origin_access_control_origin_type instance-attribute 
origin_access_control_origin_type: str

The type of origin that this origin access control is for.

signing_behavior instance-attribute 
signing_behavior: str

A value that specifies which requests CloudFront signs (adds authentication information to). This field can have one of the following values:

  • never -- CloudFront doesn't sign any origin requests.

  • always -- CloudFront signs all origin requests, overwriting the Authorization header from the viewer request if necessary.

  • no-override -- If the viewer request doesn't contain the Authorization header, CloudFront signs the origin request. If the viewer request contains the Authorization header, CloudFront doesn't sign the origin request, but instead passes along the Authorization header that it received in the viewer request.

  • always-amz-auth -- CloudFront signs all origin requests with Amazon authentication headers, and forwards the viewer's Authorization header to the origin if one is present. This value is only valid with Lambda-Web origins.

signing_protocol instance-attribute 
signing_protocol: str

The signing protocol of the origin access control. The signing protocol determines how CloudFront signs (authenticates) requests. The only valid values are sigv4 and sigv4a.