How to restrict S3 using Origin Access Identity

#aws #s3 #oai #cloudfront Steps to Restrict S3 Content By Using OAI: 1. Remove the public access for S3 bucket and disable the static website in S3. 2. In CloudFront - Security, create Origin Access Identities. 3. Create the CloudFront Distribution with below settings: Origin domain : S3 Bucket S3 bucket access : Yes use OAI (bucket can restrict access to only CloudFront) Bucket policy : Yes, update the bucket policy Default root object : index.html 4. Access the static website using CloudFront distribution. Ref: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html

Видео How to restrict S3 using Origin Access Identity автора Реактивные Разгадки