AWS::CloudFront::FieldLevelEncryptionProfile

CloudFront FieldLevelEncryptionProfile

Resource Type definition for AWS::CloudFront::FieldLevelEncryptionProfile. A field-level encryption profile maps CloudFront public keys and provider identities to the request-body field patterns that CloudFront encrypts with them.

Properties

1 configurable property. 1 required. Click a row to see details.

Filter:
PropertyTypeFlags
FieldLevelEncryptionProfileConfig
FieldLevelEncryptionProfileConfig
Required

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

AttributeTypeDescription
ArnstringThe Amazon Resource Name (ARN) of the field-level encryption profile.
IdstringThe identifier that CloudFront assigns to the field-level encryption profile.
LastModifiedTimestringThe time the field-level encryption profile was last modified.

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml
AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::CloudFront::FieldLevelEncryptionProfile

Resources:
  MyResource:
    Type: AWS::CloudFront::FieldLevelEncryptionProfile
    Properties:
      FieldLevelEncryptionProfileConfig: "value"

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

cloudfront:CreateFieldLevelEncryptionProfile

read

cloudfront:GetFieldLevelEncryptionProfile

update

cloudfront:GetFieldLevelEncryptionProfilecloudfront:UpdateFieldLevelEncryptionProfile

delete

cloudfront:GetFieldLevelEncryptionProfilecloudfront:DeleteFieldLevelEncryptionProfile

list

cloudfront:ListFieldLevelEncryptionProfiles

Get the CloudFront Cheat Sheet

Everything you need to know about CloudFront on one page. HD quality, print-friendly.

Download Free Infographic

Quick Facts

ServiceCloudFront
Properties4
Required1
TaggingNot supported
Primary IDArn

Supported Operations

CreateReadUpdateDeleteList

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

FieldLevelEncryptionProfileConfig/CallerReference

External Links