Is it correct that the original domain doesn't use OAI on the cloud front?
I connected s3 and cloudfront using oai.
So, since I connected using oai, I couldn't access the s3 domain using the original domain.
In my opinion, the distribution domain is accessed using oai and the original domain, and the original domain seems to be a rest api to access the s3 domain.
I wonder if my thinking is correct.
The bucket policy determines the access to your bucket. By setting it up for OAI access you're effectively denying any other web-based access to the bucket. You can (if you like) add an Allow statement but that kind of defeats the purpose of using OAI which is to restrict access to the bucket only to CloudFront.
By default, if you have an "Allow" in your bucket policy for the OAI access and nothing else then there is an implicit deny in place. It will be completely normal for all other access to the bucket to be denied. More information in this blog post.
Relevant questions
OAI or not OAI for serving a static website in S3 using CloudFront
asked 3 months agoAccess denied when trying to GET objects uploaded to s3 bucket via aws sdk using cloudfront
asked 7 months agoAdding OAI to CloudFront after the distribution is created
asked 6 months agoCloudFront and ALB Integration
asked a month agoIs it correct that the original domain doesn't use OAI on the cloud front?
Accepted Answerasked a month agoThe domain is not connected to the server.
asked 6 months agohow to set up CloudFront using my domain
Accepted Answerasked 5 months agoCorrect process for configuring S3 bucket so ONLY Cloudfront can access?
asked 3 years agoWhy doesn't react's BrowserRouter work on cloudfront when s3 oai settings are applied?
asked a month agoCan i still upload files to S3 using the AWS SDK when i restrict access with an CloudFront distribution?
Accepted Answerasked 6 months ago
I know the oai settings on s3. In cloudfront, the distribution domain uses oai and the origin domain, The original domain is only the rest api of s3, so I want to check if it is normal to not be able to connect if oai is set.