List of [CloudFront Origin Access Identities (OAIs)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) that are trusted for cross-account access in the AWS S3 bucket policy.<br /><br />The expected format is an array of `CloudFront OAI ARNs` or `OAI IDs`.<br /><br />``` example:   - &quot;arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EH1HDMB1FH2TC&quot;   - &quot;EH1HDMB1FH2TC&quot; ``` **Note**: Setting the policy to an `Empty` array will remove all CloudFront OAIs. 

AWS > S3 > Bucket > Policy

AWS > S3 > Bucket > Policy > Trusted Access

List of [CloudFront Origin Access Identities (OAIs)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) that are trusted for cross-account access in the AWS S3 bucket policy.&#92;n&#92;nThe expected format is an array of `CloudFront OAI ARNs` or `OAI IDs`.&#92;n&#92;n```&#92;nexample:&#92;n  - &quot;arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EH1HDMB1FH2TC&quot;&#92;n  - &quot;EH1HDMB1FH2TC&quot;&#92;n```&#92;n**Note**: Setting the policy to an `Empty` array will remove all CloudFront OAIs.&#92;n

Schema Type	`array`
Default	`- '*'`

Policy: AWS > S3 > Bucket > Policy > Trusted Access > CloudFront Origin Access Identities

Resource Types

Primary Policy

Controls

Policy Packs

Policy Specification

Category

In Your Workspace

Developers