---
title: "POST /2020-05-31/origin-access-control"
method: POST
path: "/2020-05-31/origin-access-control"
---

# POST /2020-05-31/origin-access-control

`POST /2020-05-31/origin-access-control`

Creates a new origin access control in CloudFront. After you create an origin access control, you can add it to an origin in a CloudFront distribution so that CloudFront sends authenticated (signed) requests to the origin.

This makes it possible to block public access to the origin, allowing viewers (users) to access the origin's content only through CloudFront.

For more information about using a CloudFront origin access control, see [Restricting access to an Amazon Web Services origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html) in the _Amazon CloudFront Developer Guide_.

## Response `201`

Success

## Other responses

- `480` — OriginAccessControlAlreadyExists
- `481` — TooManyOriginAccessControls
- `482` — InvalidArgument

---

[API](https://skmtc.net/aws/apis/cloudfront.md) · [All operations](https://skmtc.net/aws/apis/cloudfront/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/cloudfront/versions/fd674fc97471/schema)