From a7e5c2b8cbc6595bdbfdaa9dbfe4790c2d9b26b61640e990e08537c22797f391 Mon Sep 17 00:00:00 2001
From: Rijndael <rijndael@baldy.ga>
Date: Mon, 26 Oct 2026 07:09:10 +0000
Subject: [PATCH] added access

---
 CloudFront/_CloudFront.md | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/CloudFront/_CloudFront.md b/CloudFront/_CloudFront.md
index fb810a3..6bfc50f 100644
--- a/CloudFront/_CloudFront.md
+++ b/CloudFront/_CloudFront.md
@@ -123,6 +123,14 @@ AWS has managed policies for you to use and you can make your own also.
 
 ## Origin Access Identity
 **OAI** makes sure that an S3 bucket is only accessible through **CloudFront** and not the internet. 
-Lots of drawbacks. 
+Lots of drawbacks. Not available anymore.
 
+## Origin Access Control
+Same as Origin Access Identity, makes sure that an S3 bucket is only accessible through **CloudFront** and not the internet.
+
+Overview:
+* Enhanced sec.
+* Comprehensive HTTP support.
+* Supports uploading and downloading encrypted S3 objects with SSE-KMS.
+* Supports accessing S3 in all AWS Regions.