DeleteOriginAccessControl - Amazon CloudFront
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).


Deletes a CloudFront origin access control.

You cannot delete an origin access control if it's in use. First, update all distributions to remove the origin access control from all origins, then delete the origin access control.

Request Syntax

DELETE /2020-05-31/origin-access-control/Id HTTP/1.1 If-Match: IfMatch

URI Request Parameters

The request uses the following URI parameters.


The unique identifier of the origin access control that you are deleting.

Required: Yes


The current version (ETag value) of the origin access control that you are deleting.

Request Body

The request does not have a request body.

Response Syntax

HTTP/1.1 204

Response Elements

If the action is successful, the service sends back an HTTP 204 response with an empty HTTP body.


For information about the errors that are common to all actions, see Common Errors.


Access denied.

HTTP Status Code: 403


The If-Match version is missing or not valid.

HTTP Status Code: 400


The origin access control does not exist.

HTTP Status Code: 404


Cannot delete the origin access control because it's in use by one or more distributions.

HTTP Status Code: 409


The precondition in one or more of the request fields evaluated to false.

HTTP Status Code: 412

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: