added access

CloudFront/_CloudFront.md

@@ -123,6 +123,14 @@ AWS has managed policies for you to use and you can make your own also.
 
 ## Origin Access Identity
 **OAI** makes sure that an S3 bucket is only accessible through **CloudFront** and not the internet. 
-Lots of drawbacks. 
+Lots of drawbacks. Not available anymore.
 
+## Origin Access Control
+Same as Origin Access Identity, makes sure that an S3 bucket is only accessible through **CloudFront** and not the internet.
+
+Overview:
+* Enhanced sec.
+* Comprehensive HTTP support.
+* Supports uploading and downloading encrypted S3 objects with SSE-KMS.
+* Supports accessing S3 in all AWS Regions.