Add support for origin-access-control

[rankin-tr]

what

• add Origin Access Control feature
  • add var.origin_access_type to enable Origin Access Identity or Origina Access Control policy
  • add aws_cloudfront_origin_access_control.default resource
  • add origin_access_control_id argument to origin config on aws_cloudfront_distribution.default
• update example code
• update README

why

• provide the ability to make use of an Origin Access Control
  • retain default origin access identity behavior
• AWS recommends using origin access control
• Origin Access Identities are flagged in AWS Security Hub

references

• Closes Add support for origin-access-control to replace origin-access-identity #244
• https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html

[philchristensen]

Just adding a positive review; I tried this branch myself in a project and it worked great. Thanks @rankin-tr !

[dudymas]

/terratest

[dudymas]

/terratest

[dudymas]

/terratest

[dudymas]

/terratest

[dudymas]

/terratest

[dudymas]

/terratest

[Nuru]

/terratest

[goruha]

/terratest

[dudymas]

/terratest

[mergify]

💥 This pull request now has conflicts. Could you fix it @rankin-tr? 🙏

[mergify]

This PR was closed due to inactivity and merge conflicts. 😭
Please resolve the conflicts and reopen if necessary.

[GabisCampana]

@Nuru @dudymas

[dudymas]

/terratest

[Benbentwo]

LGTM Thanks!

[github-actions]

These changes were released in v0.95.1.