Update creating create_origin_access_identity bases on the new approach of aws s3

[AndreyNovik1993]

Is your request related to a new offering from AWS?

Is this functionality available in the AWS provider for Terraform? See CHANGELOG.md, too.

• No 🛑: please wait to file a request until the functionality is avaialble in the AWS provider
• Yes ✅: please list the AWS provider version which introduced this functionality

Is your request related to a problem? Please describe.

The old create_origin_access_identity mechanism is deprecated. Now it should be public bucket with access bases on the IAM Policies. Origin access control settings is recommended Bucket can restrict access to only CloudFront.

Describe the solution you'd like.

Could you update module for working with it ?

Describe alternatives you've considered.

Additional context

[AndreyNovik1993]

[antonbabenko]

I am unsure if I understand what is required to be updated in the module, so please open a PR with the proposed changes and updated examples.

[pawelpesz]

I think Andrey meant support for Origin Access Control which is now preferred over Origin Access Identity.

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfront_origin_access_control

[antonbabenko]

@pawelpesz You're right. The PR should be rather straightforward if anyone wants to contribute.

[github-actions[bot]]

This issue has been automatically marked as stale because it has been open 30 days with no activity. Remove stale label or comment or this issue will be closed in 10 days

[github-actions[bot]]

This issue was automatically closed because of stale in 10 days

[pawelpesz]

This is still an outstanding problem.

[github-actions[bot]]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.