cloudfront.delete_origin_access_control() API requires both Id and IfMatch as arguments

[diningPhilosopher64]

Describe the issue

The delete_access_control() API suggests that the IfMatch argument is optional.

But when this function is used without the argument as :

cloudfront = boto3.client("cloudfront")

cloudfront.delete_origin_access_control(Id="my-oac-id")

It will throw the error:

An error occurred (InvalidIfMatchVersion) when calling the DeleteOriginAccessControl operation: The If-Match version is missing or not valid for the resource.

Links

https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/cloudfront/client/delete_origin_access_control.html

[tim-finnigan]

Hi @diningPhilosopher64 thanks for reaching out. This documentation is generated upstream by the service team, so we'll need to contact the CloudFront team about addressing this in the DeleteOriginAccessControl API documentation.

I found several other reports of the IfMatch parameter being documented as optional even though it is required. You can see here in the service API model definitions where IfMatch is used in various CloudFront APIs: https://github.com/boto/botocore/blob/develop/botocore/data/cloudfront/2020-05-31/service-2.json

The service API documentation should get updated to clarify where this parameter required. I'll escalate this to the CloudFront team. And I created this issue in our cross-SDK repository for tracking going forward: aws/aws-sdk#576. Please refer to that issue for updates.