feat(mediapackagev2-alpha): add OAC integration between CloudFront and MediaPackageV2

[jamiepmullan]

Issue # (if applicable)

Closes #.
aws/aws-cdk-rfcs#910

Reason for this change

Description of changes

Complete the integration between CloudFront and MediaPackageV2 to help a user to wire this up easier with less code! Provide same experience compared to other origins in cloudfront-origins.

Describe any new or updated permissions being added

Description of how you validated changes

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

(This review is outdated)

[github-actions]

⚠️ Experimental Feature: This security report is currently in experimental phase. Results may include false positives and the rules are being actively refined.
This security report is NOT a review blocker. Please try merge from main to avoid findings unrelated to the PR.
To suppress a specific rule, see Suppressing Rules.

---

	Tests	Passed ✅	Skipped	Failed
Security Guardian Results	48 ran	48 passed

Test	Result
No test annotations available

• View Security Guardian Results

[github-actions]

⚠️ Experimental Feature: This security report is currently in experimental phase. Results may include false positives and the rules are being actively refined.
This security report is NOT a review blocker. Please try merge from main to avoid findings unrelated to the PR.
To suppress a specific rule, see Suppressing Rules.

---

	Tests	Passed ✅	Skipped	Failed
Security Guardian Results with resolved templates	48 ran	48 passed

Test	Result
No test annotations available

• View Security Guardian Results with resolved templates

[jamiepmullan]

Clarification Request

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-28 12:11 UTC · Rule: default-squash
• ✅ Checks started · in-place
• 🚫 Left the queue — 2026-04-28 12:17 UTC · at 446be607912147de8b9d37b4a81d86f62a07736d

This pull request spent 5 minutes 48 seconds in the queue, with no time running CI.

Waiting for any of:

• check-neutral = build
• check-skipped = build
• check-success = build

All conditions

• any of [🛡 GitHub branch protection]:
  • check-neutral = build
  • check-skipped = build
  • check-success = build
• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • feat(mediapackagev2-alpha): add OAC integration between CloudFront and MediaPackageV2 #37701
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • feat(mediapackagev2-alpha): add OAC integration between CloudFront and MediaPackageV2 #37701
• any of [🛡 GitHub branch protection]:
  • check-success = validate-pr
  • check-neutral = validate-pr
  • check-skipped = validate-pr

Reason

Pull request #37701 has been dequeued

The pull request rule doesn't match anymore. The following conditions don't match anymore:

• -label~=(blocked|do-not-merge|agent-docs-review-needed|no-squash|two-approvers|priority-pr)
• check-success=build
• check-success=validate-pr
• any of: [🔀 queue conditions]
  • all of: [📌 queue conditions of queue rule default-squash]
    • -label~=(blocked|do-not-merge|agent-docs-review-needed|no-squash|priority-pr)
    • check-success=build
    • check-success=validate-pr
    • any of: [🛡 GitHub branch protection]
      • check-neutral = validate-pr
      • check-skipped = validate-pr
      • check-success = validate-pr
    • any of: [🛡 GitHub branch protection]
      • check-neutral = build
      • check-skipped = build
      • check-success = build

Hint

You should look at the reason for the failure and decide if the pull request needs to be fixed or if you want to requeue it.
If you do update this pull request, it will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue instead, you can requeue the pull request, without updating it, by posting a @mergifyio queue comment.

[alvazjor]

This PR will be merged once aws/aws-cdk-rfcs#910 gets merge. The RFC is already approved and in final comments period, if by May 4th there is no additional comments, we can merge the RFC and this PR too