public String getOriginAccessIdentity() {
        return this.originAccessIdentity;
    }
<note>
<p>
If you're using origin access control (OAC) instead of origin access identity, specify an empty
<code>OriginAccessIdentity</code> element. For more information, see <a href=
"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html"
>Restricting access to an Amazon Web Services</a> in the <i>Amazon CloudFront Developer Guide</i>.
</p>
</note>
<p>
The CloudFront origin access identity to associate with the origin. Use an origin access identity to configure
the origin so that viewers can <i>only</i> access objects in an Amazon S3 bucket through CloudFront. The format
of the value is:
</p>
<p>
<code>origin-access-identity/cloudfront/ID-of-origin-access-identity</code>
</p>
<p>
The <code> <i>ID-of-origin-access-identity</i> </code> is the value that CloudFront returned in the
<code>ID</code> element when you created the origin access identity.
</p>
<p>
If you want viewers to be able to access objects using either the CloudFront URL or the Amazon S3 URL, specify an
empty <code>OriginAccessIdentity</code> element.
</p>
<p>
To delete the origin access identity from an existing distribution, update the distribution configuration and
include an empty <code>OriginAccessIdentity</code> element.
</p>
<p>
To replace the origin access identity, update the distribution configuration and specify the new origin access
identity.
</p>
<p>
For more information about the origin access identity, see <a
href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html">Serving Private
Content through CloudFront</a> in the <i>Amazon CloudFront Developer Guide</i>.
</p>

@return <p>
        If you're using origin access control (OAC) instead of origin access identity, specify an empty
        <code>OriginAccessIdentity</code> element. For more information, see <a href=
        "https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html"
        >Restricting access to an Amazon Web Services</a> in the <i>Amazon CloudFront Developer Guide</i>.
        </p>
        </note>
        <p>
        The CloudFront origin access identity to associate with the origin. Use an origin access identity to
        configure the origin so that viewers can <i>only</i> access objects in an Amazon S3 bucket through
        CloudFront. The format of the value is:
        </p>
        <p>
        <code>origin-access-identity/cloudfront/ID-of-origin-access-identity</code>
        </p>
        <p>
        The <code> <i>ID-of-origin-access-identity</i> </code> is the value that CloudFront returned in the
        <code>ID</code> element when you created the origin access identity.
        </p>
        <p>
        If you want viewers to be able to access objects using either the CloudFront URL or the Amazon S3 URL,
        specify an empty <code>OriginAccessIdentity</code> element.
        </p>
        <p>
        To delete the origin access identity from an existing distribution, update the distribution configuration
        and include an empty <code>OriginAccessIdentity</code> element.
        </p>
        <p>
        To replace the origin access identity, update the distribution configuration and specify the new origin
        access identity.
        </p>
        <p>
        For more information about the origin access identity, see <a
        href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html">Serving
        Private Content through CloudFront</a> in the <i>Amazon CloudFront Developer Guide</i>.
aws-java-sdk-cloudfront/src/main/java/com/amazonaws/services/cloudfront/model/S3OriginConfig.java