Hi@akhtar,
The following example updates the origin access identity with the ID. The only field that you can update is the OAI's Comment. To update an OAI, you must have the OAI's ID and ETag.
$ aws cloudfront update-cloud-front-origin-access-identity \
--id E74FTE3AEXAMPLE \
--if-match E2QWRUHEXAMPLE \
--cloud-front-origin-access-identity-config \
CallerReference=cli-example,Comment="Example OAI Updated"