isPrivateOriginAccessEnabled

Specifies whether private origin access is enabled for the distribution's origin. With private origin access, the distribution can serve objects that aren't publicly accessible from a Lightsail bucket.

This applies when you set the bucket's getObject access rule to private. It also applies when you set getObject to public but set individual objects to private.