HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux ip-172-31-42-149 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025 aarch64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //usr/share/doc/awscli/examples/cloudfront/update-cloud-front-origin-access-identity.rst
**To update a CloudFront origin access identity**

The following example updates the origin access identity (OAI) with the ID
``E74FTE3AEXAMPLE``. The only field that you can update is the OAI's
``Comment``.

To update an OAI, you must have the OAI's ID and ``ETag``. The OAI ID is returned in the output of the
`create-cloud-front-origin-access-identity
<create-cloud-front-origin-access-identity.html>`_ and
`list-cloud-front-origin-access-identities
<list-cloud-front-origin-access-identities.html>`_ commands.
To get the ``ETag``, use the
`get-cloud-front-origin-access-identity
<get-cloud-front-origin-access-identity.html>`_ or
`get-cloud-front-origin-access-identity-config
<get-cloud-front-origin-access-identity-config.html>`_ command.
Use the ``--if-match`` option to provide the OAI's ``ETag``.

::

    aws cloudfront update-cloud-front-origin-access-identity \
        --id E74FTE3AEXAMPLE \
        --if-match E2QWRUHEXAMPLE \
        --cloud-front-origin-access-identity-config \
            CallerReference=cli-example,Comment="Example OAI Updated"

You can accomplish the same thing by providing the OAI configuration in a JSON
file, as shown in the following example::

    aws cloudfront update-cloud-front-origin-access-identity \
        --id E74FTE3AEXAMPLE \
        --if-match E2QWRUHEXAMPLE \
        --cloud-front-origin-access-identity-config file://OAI-config.json

The file ``OAI-config.json`` is a JSON document in the current directory that
contains the following::

    {
        "CallerReference": "cli-example",
        "Comment": "Example OAI Updated"
    }

Whether you provide the OAI configuration with a command line argument or a
JSON file, the output is the same::

    {
        "ETag": "E9LHASXEXAMPLE",
        "CloudFrontOriginAccessIdentity": {
            "Id": "E74FTE3AEXAMPLE",
            "S3CanonicalUserId": "cd13868f797c227fbea2830611a26fe0a21ba1b826ab4bed9b7771c9aEXAMPLE",
            "CloudFrontOriginAccessIdentityConfig": {
                "CallerReference": "cli-example",
                "Comment": "Example OAI Updated"
            }
        }
    }