How to Migrate from CloudFront OAI to OAC Without Breaking S3 Access

If you’re running an S3-backed CloudFront distribution, there’s a good chance you’re still using Origin Access Identity (OAI) — and that’s becoming a problem. AWS has made it clear that Origin Access Control (OAC) is the modern replacement, with stronger security defaults and support for features OAI simply can’t handle.