CDKv2 How to enable OriginAccessControl

[carminoplata]

Hi everyone,

I'm completely new to AWS and CDK and I'm trying to follow multiple tutorials in order to build the web application for my customer.
In particular, I read from Restricting access to an Amazon S3 origin that the best way to enable request to my S3 bucket from CDK is using Origin Access Control (OAC) instead of Origin Access Identity (OAI). In fact there is a guide to migrate from the latter to OAC.

I would like to use OAC but I don't understand how I can configure it inside my CloudFront Distribution since there isn't any availabe API from official docs here.
It looks like that I can create OAC via CfnOriginAccessControl which should be a L1 Construct as far as I understood. After I created, how can I configure it into my Distribution?