Ravi Sir's Cards › AWS
OAC or legacy OAI?
This comparison card contrasts OAC or legacy OAI. Origin Access Control: SigV4. It works with SSE-KMS. It also notes modern default. Origin Access Identity: Legacy canonical user. It also notes limited features. The card pairs Origin Access Control with default for new work, and Origin Access Identity with migrate away from OAI.
Read card text
What this card says
OAC or legacy OAI?
Origin Access Control
SigV4; works with SSE-KMS; modern default.
Origin Access Identity
Legacy canonical user; limited features.
Key points
New CloudFront → S3 origins.
Old stacks not yet migrated.
Example
CreateOriginAccessControl / CreateCloudFrontOriginAccessIdentity
Use when
Default for new work.
Migrate away from OAI.