List of [CloudFront Origin Access Identities (OAIs)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) that are trusted for cross-account access in the AWS DynamoDB table policy.<br /><br />The expected format is an array of `CloudFront OAI ARNs` or `OAI IDs`.<br /><br />``` example:   - &quot;arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EH1HDMB1FH2TC&quot;   - &quot;EH1HDMB1FH2TC&quot; ``` **Note**: Setting the policy to an `Empty` array will remove all CloudFront OAIs. 

Azure > Management Group

Azure > Subscription

Azure > Tenant

Azure > Active Directory > Directory

Kubernetes > Cluster

AWS > Account

GitHub > Repository

ServiceNow > Instance

GCP > Project

AWS > Amplify > App

AWS > Directory Service > Directory

AWS > Data Pipeline > Pipeline [Deprecated]

AWS > SageMaker > Domain

AWS > SageMaker > Endpoint

AWS > SageMaker > Endpoint Configuration

AWS > SageMaker > Model

AWS > SageMaker > Notebook Instance

AWS > SageMaker > Training Job

AWS > Region

AWS > EC2 > Instance

GCP > Folder

Azure > Resource Group

AWS > DynamoDB > Table > Policy > Trusted Access

List of [CloudFront Origin Access Identities (OAIs)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) that are trusted for cross-account access in the AWS DynamoDB table policy.&#92;n&#92;nThe expected format is an array of `CloudFront OAI ARNs` or `OAI IDs`.&#92;n&#92;n```&#92;nexample:&#92;n  - &quot;arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EH1HDMB1FH2TC&quot;&#92;n  - &quot;EH1HDMB1FH2TC&quot;&#92;n```&#92;n**Note**: Setting the policy to an `Empty` array will remove all CloudFront OAIs.&#92;n

AWS > DynamoDB > Table

AWS > DynamoDB > Table > Policy > Trusted Access > CloudFront Origin Access Identities

Schema Type	`array`
Default	`- '*'`

Policy: AWS > DynamoDB > Table > Policy > Trusted Access > CloudFront Origin Access Identities

Targets

Primary Policy

Controls

Policy Specification

Category

In Your Workspace

Developers