AWS::CloudFront::FieldLevelEncryptionConfig

CloudFront FieldLevelEncryptionConfig

Resource Type definition for AWS::CloudFront::FieldLevelEncryptionConfig. A field-level encryption configuration, which specifies the query arg profiles and content type profiles CloudFront uses to encrypt sensitive fields in viewer requests.

Properties

4 configurable properties. 3 required. Click a row to see details.

Filter:
PropertyTypeFlags
CallerReference
string
RequiredCreate-only
ContentTypeProfileConfig
ContentTypeProfileConfig
Required
QueryArgProfileConfig
QueryArgProfileConfig
Required
Comment
string

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

AttributeTypeDescription
ArnstringThe Amazon Resource Name (ARN) of the field-level encryption configuration.
IdstringThe identifier CloudFront assigns to the field-level encryption configuration.
LastModifiedTimestringThe time the field-level encryption configuration was last changed.

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml
AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::CloudFront::FieldLevelEncryptionConfig

Resources:
  MyResource:
    Type: AWS::CloudFront::FieldLevelEncryptionConfig
    Properties:
      CallerReference: "value"
      ContentTypeProfileConfig: "value"
      QueryArgProfileConfig: "value"

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

cloudfront:CreateFieldLevelEncryptionConfig

read

cloudfront:GetFieldLevelEncryption

update

cloudfront:UpdateFieldLevelEncryptionConfigcloudfront:GetFieldLevelEncryption

delete

cloudfront:DeleteFieldLevelEncryptionConfigcloudfront:GetFieldLevelEncryption

list

cloudfront:ListFieldLevelEncryptionConfigs

Get the CloudFront Cheat Sheet

Everything you need to know about CloudFront on one page. HD quality, print-friendly.

Download Free Infographic

Quick Facts

ServiceCloudFront
Properties7
Required3
TaggingNot supported
Primary IDArn

Supported Operations

CreateReadUpdateDeleteList

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

CallerReference

Related Resources

External Links