CloudFront OAC for S3 Multi-Region Access Points: three AWS guides give three different answers in 2026
Putting origin access control in front of an S3 Multi-Region Access Point means reconciling a Developer Guide, an API reference and an S3 user guide that contradict each other on signing protocol, origin type and Region