{
  "additionalProperties" : false,
  "definitions" : {
    "OriginAccessControlConfig" : {
      "additionalProperties" : false,
      "properties" : {
        "Name" : {
          "type" : "string"
        },
        "Description" : {
          "type" : "string"
        },
        "SigningProtocol" : {
          "pattern" : "^(sigv4)$",
          "type" : "string"
        },
        "SigningBehavior" : {
          "pattern" : "^(never|no-override|always)$",
          "type" : "string"
        },
        "OriginAccessControlOriginType" : {
          "pattern" : "^(s3|mediastore)$",
          "type" : "string"
        }
      },
      "required" : [ "Name", "SigningProtocol", "SigningBehavior", "OriginAccessControlOriginType" ],
      "type" : "object"
    }
  },
  "description" : "Resource Type definition for AWS::CloudFront::OriginAccessControl",
  "handlers" : {
    "create" : {
      "permissions" : [ "cloudfront:CreateOriginAccessControl" ]
    },
    "delete" : {
      "permissions" : [ "cloudfront:DeleteOriginAccessControl" ]
    },
    "list" : {
      "permissions" : [ "cloudfront:ListOriginAccessControls" ]
    },
    "read" : {
      "permissions" : [ "cloudfront:GetOriginAccessControl" ]
    },
    "update" : {
      "permissions" : [ "cloudfront:UpdateOriginAccessControl" ]
    }
  },
  "primaryIdentifier" : [ "/properties/Id" ],
  "properties" : {
    "OriginAccessControlConfig" : {
      "$ref" : "#/definitions/OriginAccessControlConfig"
    },
    "Id" : {
      "type" : "string"
    }
  },
  "readOnlyProperties" : [ "/properties/Id" ],
  "required" : [ "OriginAccessControlConfig" ],
  "taggable" : false,
  "typeName" : "AWS::CloudFront::OriginAccessControl"
}