awscloudfrontorigins: support "Don't use OAI" option in S3 origin
Open
@aws-cdk/aws-s3
effort/small
feature-request
p2
- Dominant language
- TypeScript
- Stars
- 12.9k
- Forks
- 4.6k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 83
Description
At the moment, a new Origin Access Identity will be created for a S3 origin no matter what in CDK. Please allow [an empty string](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-s3originconfig.html) to be specified in `OriginAccessIdentity`, such as:
```yaml
- DomainName: !Sub "my-bucket.s3.ap-southeast-2.${AWS::URLSuffix}"
Id: my-origin-id
S3OriginConfig:
# NOTE: keep this as empty to disable OAI
OriginAccessIdentity: ""
```
to support the "Don't use OAI" option in CloudFront origin configuration page:
Contributor guide
Assessment
This issue has not been assessed yet.