Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS
  3. API Docs
  4. cloudfront
  5. FieldLevelEncryptionConfig
AWS v6.72.0 published on Tuesday, Mar 11, 2025 by Pulumi
pulumi/pulumi-aws

aws.cloudfront.FieldLevelEncryptionConfig

Explore with Pulumi AI

aws logo
AWS v6.72.0 published on Tuesday, Mar 11, 2025 by Pulumi
pulumi/pulumi-aws

    Provides a CloudFront Field-level Encryption Config resource.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const test = new aws.cloudfront.FieldLevelEncryptionConfig("test", {
    comment: "test comment",
    contentTypeProfileConfig: {
        forwardWhenContentTypeIsUnknown: true,
        contentTypeProfiles: {
            items: [{
                contentType: "application/x-www-form-urlencoded",
                format: "URLEncoded",
            }],
        },
    },
    queryArgProfileConfig: {
        forwardWhenQueryArgProfileIsUnknown: true,
        queryArgProfiles: {
            items: [{
                profileId: testAwsCloudfrontFieldLevelEncryptionProfile.id,
                queryArg: "Arg1",
            }],
        },
    },
});

    import pulumi
import pulumi_aws as aws

test = aws.cloudfront.FieldLevelEncryptionConfig("test",
    comment="test comment",
    content_type_profile_config={
        "forward_when_content_type_is_unknown": True,
        "content_type_profiles": {
            "items": [{
                "content_type": "application/x-www-form-urlencoded",
                "format": "URLEncoded",
            }],
        },
    },
    query_arg_profile_config={
        "forward_when_query_arg_profile_is_unknown": True,
        "query_arg_profiles": {
            "items": [{
                "profile_id": test_aws_cloudfront_field_level_encryption_profile["id"],
                "query_arg": "Arg1",
            }],
        },
    })

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/cloudfront"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudfront.NewFieldLevelEncryptionConfig(ctx, "test", &cloudfront.FieldLevelEncryptionConfigArgs{
			Comment: pulumi.String("test comment"),
			ContentTypeProfileConfig: &cloudfront.FieldLevelEncryptionConfigContentTypeProfileConfigArgs{
				ForwardWhenContentTypeIsUnknown: pulumi.Bool(true),
				ContentTypeProfiles: &cloudfront.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesArgs{
					Items: cloudfront.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesItemArray{
						&cloudfront.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesItemArgs{
							ContentType: pulumi.String("application/x-www-form-urlencoded"),
							Format:      pulumi.String("URLEncoded"),
						},
					},
				},
			},
			QueryArgProfileConfig: &cloudfront.FieldLevelEncryptionConfigQueryArgProfileConfigArgs{
				ForwardWhenQueryArgProfileIsUnknown: pulumi.Bool(true),
				QueryArgProfiles: &cloudfront.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesArgs{
					Items: cloudfront.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesItemArray{
						&cloudfront.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesItemArgs{
							ProfileId: pulumi.Any(testAwsCloudfrontFieldLevelEncryptionProfile.Id),
							QueryArg:  pulumi.String("Arg1"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var test = new Aws.CloudFront.FieldLevelEncryptionConfig("test", new()
    {
        Comment = "test comment",
        ContentTypeProfileConfig = new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigContentTypeProfileConfigArgs
        {
            ForwardWhenContentTypeIsUnknown = true,
            ContentTypeProfiles = new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesArgs
            {
                Items = new[]
                {
                    new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesItemArgs
                    {
                        ContentType = "application/x-www-form-urlencoded",
                        Format = "URLEncoded",
                    },
                },
            },
        },
        QueryArgProfileConfig = new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigQueryArgProfileConfigArgs
        {
            ForwardWhenQueryArgProfileIsUnknown = true,
            QueryArgProfiles = new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesArgs
            {
                Items = new[]
                {
                    new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesItemArgs
                    {
                        ProfileId = testAwsCloudfrontFieldLevelEncryptionProfile.Id,
                        QueryArg = "Arg1",
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.cloudfront.FieldLevelEncryptionConfig;
import com.pulumi.aws.cloudfront.FieldLevelEncryptionConfigArgs;
import com.pulumi.aws.cloudfront.inputs.FieldLevelEncryptionConfigContentTypeProfileConfigArgs;
import com.pulumi.aws.cloudfront.inputs.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesArgs;
import com.pulumi.aws.cloudfront.inputs.FieldLevelEncryptionConfigQueryArgProfileConfigArgs;
import com.pulumi.aws.cloudfront.inputs.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var test = new FieldLevelEncryptionConfig("test", FieldLevelEncryptionConfigArgs.builder()
            .comment("test comment")
            .contentTypeProfileConfig(FieldLevelEncryptionConfigContentTypeProfileConfigArgs.builder()
                .forwardWhenContentTypeIsUnknown(true)
                .contentTypeProfiles(FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesArgs.builder()
                    .items(FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesItemArgs.builder()
                        .contentType("application/x-www-form-urlencoded")
                        .format("URLEncoded")
                        .build())
                    .build())
                .build())
            .queryArgProfileConfig(FieldLevelEncryptionConfigQueryArgProfileConfigArgs.builder()
                .forwardWhenQueryArgProfileIsUnknown(true)
                .queryArgProfiles(FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesArgs.builder()
                    .items(FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesItemArgs.builder()
                        .profileId(testAwsCloudfrontFieldLevelEncryptionProfile.id())
                        .queryArg("Arg1")
                        .build())
                    .build())
                .build())
            .build());

    }
}

    resources:
  test:
    type: aws:cloudfront:FieldLevelEncryptionConfig
    properties:
      comment: test comment
      contentTypeProfileConfig:
        forwardWhenContentTypeIsUnknown: true
        contentTypeProfiles:
          items:
            - contentType: application/x-www-form-urlencoded
              format: URLEncoded
      queryArgProfileConfig:
        forwardWhenQueryArgProfileIsUnknown: true
        queryArgProfiles:
          items:
            - profileId: ${testAwsCloudfrontFieldLevelEncryptionProfile.id}
              queryArg: Arg1

    Create FieldLevelEncryptionConfig Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new FieldLevelEncryptionConfig(name: string, args: FieldLevelEncryptionConfigArgs, opts?: CustomResourceOptions);
    @overload
def FieldLevelEncryptionConfig(resource_name: str,
                               args: FieldLevelEncryptionConfigArgs,
                               opts: Optional[ResourceOptions] = None)

@overload
def FieldLevelEncryptionConfig(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               content_type_profile_config: Optional[FieldLevelEncryptionConfigContentTypeProfileConfigArgs] = None,
                               query_arg_profile_config: Optional[FieldLevelEncryptionConfigQueryArgProfileConfigArgs] = None,
                               comment: Optional[str] = None)
    func NewFieldLevelEncryptionConfig(ctx *Context, name string, args FieldLevelEncryptionConfigArgs, opts ...ResourceOption) (*FieldLevelEncryptionConfig, error)
    public FieldLevelEncryptionConfig(string name, FieldLevelEncryptionConfigArgs args, CustomResourceOptions? opts = null)
    public FieldLevelEncryptionConfig(String name, FieldLevelEncryptionConfigArgs args)
public FieldLevelEncryptionConfig(String name, FieldLevelEncryptionConfigArgs args, CustomResourceOptions options)

    type: aws:cloudfront:FieldLevelEncryptionConfig
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args FieldLevelEncryptionConfigArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FieldLevelEncryptionConfigArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FieldLevelEncryptionConfigArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FieldLevelEncryptionConfigArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FieldLevelEncryptionConfigArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var fieldLevelEncryptionConfigResource = new Aws.CloudFront.FieldLevelEncryptionConfig("fieldLevelEncryptionConfigResource", new()
{
    ContentTypeProfileConfig = new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigContentTypeProfileConfigArgs
    {
        ContentTypeProfiles = new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesArgs
        {
            Items = new[]
            {
                new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesItemArgs
                {
                    ContentType = "string",
                    Format = "string",
                    ProfileId = "string",
                },
            },
        },
        ForwardWhenContentTypeIsUnknown = false,
    },
    QueryArgProfileConfig = new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigQueryArgProfileConfigArgs
    {
        ForwardWhenQueryArgProfileIsUnknown = false,
        QueryArgProfiles = new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesArgs
        {
            Items = new[]
            {
                new Aws.CloudFront.Inputs.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesItemArgs
                {
                    ProfileId = "string",
                    QueryArg = "string",
                },
            },
        },
    },
    Comment = "string",
});

    example, err := cloudfront.NewFieldLevelEncryptionConfig(ctx, "fieldLevelEncryptionConfigResource", &cloudfront.FieldLevelEncryptionConfigArgs{
	ContentTypeProfileConfig: &cloudfront.FieldLevelEncryptionConfigContentTypeProfileConfigArgs{
		ContentTypeProfiles: &cloudfront.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesArgs{
			Items: cloudfront.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesItemArray{
				&cloudfront.FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesItemArgs{
					ContentType: pulumi.String("string"),
					Format:      pulumi.String("string"),
					ProfileId:   pulumi.String("string"),
				},
			},
		},
		ForwardWhenContentTypeIsUnknown: pulumi.Bool(false),
	},
	QueryArgProfileConfig: &cloudfront.FieldLevelEncryptionConfigQueryArgProfileConfigArgs{
		ForwardWhenQueryArgProfileIsUnknown: pulumi.Bool(false),
		QueryArgProfiles: &cloudfront.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesArgs{
			Items: cloudfront.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesItemArray{
				&cloudfront.FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesItemArgs{
					ProfileId: pulumi.String("string"),
					QueryArg:  pulumi.String("string"),
				},
			},
		},
	},
	Comment: pulumi.String("string"),
})

    var fieldLevelEncryptionConfigResource = new FieldLevelEncryptionConfig("fieldLevelEncryptionConfigResource", FieldLevelEncryptionConfigArgs.builder()
    .contentTypeProfileConfig(FieldLevelEncryptionConfigContentTypeProfileConfigArgs.builder()
        .contentTypeProfiles(FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesArgs.builder()
            .items(FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesItemArgs.builder()
                .contentType("string")
                .format("string")
                .profileId("string")
                .build())
            .build())
        .forwardWhenContentTypeIsUnknown(false)
        .build())
    .queryArgProfileConfig(FieldLevelEncryptionConfigQueryArgProfileConfigArgs.builder()
        .forwardWhenQueryArgProfileIsUnknown(false)
        .queryArgProfiles(FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesArgs.builder()
            .items(FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesItemArgs.builder()
                .profileId("string")
                .queryArg("string")
                .build())
            .build())
        .build())
    .comment("string")
    .build());

    field_level_encryption_config_resource = aws.cloudfront.FieldLevelEncryptionConfig("fieldLevelEncryptionConfigResource",
    content_type_profile_config={
        "content_type_profiles": {
            "items": [{
                "content_type": "string",
                "format": "string",
                "profile_id": "string",
            }],
        },
        "forward_when_content_type_is_unknown": False,
    },
    query_arg_profile_config={
        "forward_when_query_arg_profile_is_unknown": False,
        "query_arg_profiles": {
            "items": [{
                "profile_id": "string",
                "query_arg": "string",
            }],
        },
    },
    comment="string")

    const fieldLevelEncryptionConfigResource = new aws.cloudfront.FieldLevelEncryptionConfig("fieldLevelEncryptionConfigResource", {
    contentTypeProfileConfig: {
        contentTypeProfiles: {
            items: [{
                contentType: "string",
                format: "string",
                profileId: "string",
            }],
        },
        forwardWhenContentTypeIsUnknown: false,
    },
    queryArgProfileConfig: {
        forwardWhenQueryArgProfileIsUnknown: false,
        queryArgProfiles: {
            items: [{
                profileId: "string",
                queryArg: "string",
            }],
        },
    },
    comment: "string",
});

    type: aws:cloudfront:FieldLevelEncryptionConfig
properties:
    comment: string
    contentTypeProfileConfig:
        contentTypeProfiles:
            items:
                - contentType: string
                  format: string
                  profileId: string
        forwardWhenContentTypeIsUnknown: false
    queryArgProfileConfig:
        forwardWhenQueryArgProfileIsUnknown: false
        queryArgProfiles:
            items:
                - profileId: string
                  queryArg: string

    FieldLevelEncryptionConfig Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The FieldLevelEncryptionConfig resource accepts the following input properties:

    ContentTypeProfileConfig FieldLevelEncryptionConfigContentTypeProfileConfig
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    QueryArgProfileConfig FieldLevelEncryptionConfigQueryArgProfileConfig
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    Comment string
    An optional comment about the Field Level Encryption Config.
    ContentTypeProfileConfig FieldLevelEncryptionConfigContentTypeProfileConfigArgs
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    QueryArgProfileConfig FieldLevelEncryptionConfigQueryArgProfileConfigArgs
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    Comment string
    An optional comment about the Field Level Encryption Config.
    contentTypeProfileConfig FieldLevelEncryptionConfigContentTypeProfileConfig
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    queryArgProfileConfig FieldLevelEncryptionConfigQueryArgProfileConfig
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    comment String
    An optional comment about the Field Level Encryption Config.
    contentTypeProfileConfig FieldLevelEncryptionConfigContentTypeProfileConfig
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    queryArgProfileConfig FieldLevelEncryptionConfigQueryArgProfileConfig
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    comment string
    An optional comment about the Field Level Encryption Config.
    content_type_profile_config FieldLevelEncryptionConfigContentTypeProfileConfigArgs
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    query_arg_profile_config FieldLevelEncryptionConfigQueryArgProfileConfigArgs
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    comment str
    An optional comment about the Field Level Encryption Config.
    contentTypeProfileConfig Property Map
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    queryArgProfileConfig Property Map
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    comment String
    An optional comment about the Field Level Encryption Config.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the FieldLevelEncryptionConfig resource produces the following output properties:

    Arn string
    The Field Level Encryption Config ARN.
    CallerReference string
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    Etag string
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    Id string
    The provider-assigned unique ID for this managed resource.
    Arn string
    The Field Level Encryption Config ARN.
    CallerReference string
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    Etag string
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    Id string
    The provider-assigned unique ID for this managed resource.
    arn String
    The Field Level Encryption Config ARN.
    callerReference String
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    etag String
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    id String
    The provider-assigned unique ID for this managed resource.
    arn string
    The Field Level Encryption Config ARN.
    callerReference string
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    etag string
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    id string
    The provider-assigned unique ID for this managed resource.
    arn str
    The Field Level Encryption Config ARN.
    caller_reference str
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    etag str
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    id str
    The provider-assigned unique ID for this managed resource.
    arn String
    The Field Level Encryption Config ARN.
    callerReference String
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    etag String
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing FieldLevelEncryptionConfig Resource

    Get an existing FieldLevelEncryptionConfig resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: FieldLevelEncryptionConfigState, opts?: CustomResourceOptions): FieldLevelEncryptionConfig
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        arn: Optional[str] = None,
        caller_reference: Optional[str] = None,
        comment: Optional[str] = None,
        content_type_profile_config: Optional[FieldLevelEncryptionConfigContentTypeProfileConfigArgs] = None,
        etag: Optional[str] = None,
        query_arg_profile_config: Optional[FieldLevelEncryptionConfigQueryArgProfileConfigArgs] = None) -> FieldLevelEncryptionConfig
    func GetFieldLevelEncryptionConfig(ctx *Context, name string, id IDInput, state *FieldLevelEncryptionConfigState, opts ...ResourceOption) (*FieldLevelEncryptionConfig, error)
    public static FieldLevelEncryptionConfig Get(string name, Input<string> id, FieldLevelEncryptionConfigState? state, CustomResourceOptions? opts = null)
    public static FieldLevelEncryptionConfig get(String name, Output<String> id, FieldLevelEncryptionConfigState state, CustomResourceOptions options)
    resources:  _:    type: aws:cloudfront:FieldLevelEncryptionConfig    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Arn string
    The Field Level Encryption Config ARN.
    CallerReference string
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    Comment string
    An optional comment about the Field Level Encryption Config.
    ContentTypeProfileConfig FieldLevelEncryptionConfigContentTypeProfileConfig
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    Etag string
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    QueryArgProfileConfig FieldLevelEncryptionConfigQueryArgProfileConfig
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    Arn string
    The Field Level Encryption Config ARN.
    CallerReference string
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    Comment string
    An optional comment about the Field Level Encryption Config.
    ContentTypeProfileConfig FieldLevelEncryptionConfigContentTypeProfileConfigArgs
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    Etag string
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    QueryArgProfileConfig FieldLevelEncryptionConfigQueryArgProfileConfigArgs
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    arn String
    The Field Level Encryption Config ARN.
    callerReference String
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    comment String
    An optional comment about the Field Level Encryption Config.
    contentTypeProfileConfig FieldLevelEncryptionConfigContentTypeProfileConfig
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    etag String
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    queryArgProfileConfig FieldLevelEncryptionConfigQueryArgProfileConfig
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    arn string
    The Field Level Encryption Config ARN.
    callerReference string
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    comment string
    An optional comment about the Field Level Encryption Config.
    contentTypeProfileConfig FieldLevelEncryptionConfigContentTypeProfileConfig
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    etag string
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    queryArgProfileConfig FieldLevelEncryptionConfigQueryArgProfileConfig
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    arn str
    The Field Level Encryption Config ARN.
    caller_reference str
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    comment str
    An optional comment about the Field Level Encryption Config.
    content_type_profile_config FieldLevelEncryptionConfigContentTypeProfileConfigArgs
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    etag str
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    query_arg_profile_config FieldLevelEncryptionConfigQueryArgProfileConfigArgs
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.
    arn String
    The Field Level Encryption Config ARN.
    callerReference String
    Internal value used by CloudFront to allow future updates to the Field Level Encryption Config.
    comment String
    An optional comment about the Field Level Encryption Config.
    contentTypeProfileConfig Property Map
    Content Type Profile Config specifies when to forward content if a content type isn't recognized and profiles to use as by default in a request if a query argument doesn't specify a profile to use.
    etag String
    The current version of the Field Level Encryption Config. For example: E2QWRUHAPOMQZL.
    queryArgProfileConfig Property Map
    Query Arg Profile Config that specifies when to forward content if a profile isn't found and the profile that can be provided as a query argument in a request.

    Supporting Types

    FieldLevelEncryptionConfigContentTypeProfileConfig, FieldLevelEncryptionConfigContentTypeProfileConfigArgs

    ContentTypeProfiles FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfiles
    Object that contains an attribute items that contains the list of configurations for a field-level encryption content type-profile. See Content Type Profile.
    ForwardWhenContentTypeIsUnknown bool
    specifies what to do when an unknown content type is provided for the profile. If true, content is forwarded without being encrypted when the content type is unknown. If false (the default), an error is returned when the content type is unknown.
    ContentTypeProfiles FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfiles
    Object that contains an attribute items that contains the list of configurations for a field-level encryption content type-profile. See Content Type Profile.
    ForwardWhenContentTypeIsUnknown bool
    specifies what to do when an unknown content type is provided for the profile. If true, content is forwarded without being encrypted when the content type is unknown. If false (the default), an error is returned when the content type is unknown.
    contentTypeProfiles FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfiles
    Object that contains an attribute items that contains the list of configurations for a field-level encryption content type-profile. See Content Type Profile.
    forwardWhenContentTypeIsUnknown Boolean
    specifies what to do when an unknown content type is provided for the profile. If true, content is forwarded without being encrypted when the content type is unknown. If false (the default), an error is returned when the content type is unknown.
    contentTypeProfiles FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfiles
    Object that contains an attribute items that contains the list of configurations for a field-level encryption content type-profile. See Content Type Profile.
    forwardWhenContentTypeIsUnknown boolean
    specifies what to do when an unknown content type is provided for the profile. If true, content is forwarded without being encrypted when the content type is unknown. If false (the default), an error is returned when the content type is unknown.
    content_type_profiles FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfiles
    Object that contains an attribute items that contains the list of configurations for a field-level encryption content type-profile. See Content Type Profile.
    forward_when_content_type_is_unknown bool
    specifies what to do when an unknown content type is provided for the profile. If true, content is forwarded without being encrypted when the content type is unknown. If false (the default), an error is returned when the content type is unknown.
    contentTypeProfiles Property Map
    Object that contains an attribute items that contains the list of configurations for a field-level encryption content type-profile. See Content Type Profile.
    forwardWhenContentTypeIsUnknown Boolean
    specifies what to do when an unknown content type is provided for the profile. If true, content is forwarded without being encrypted when the content type is unknown. If false (the default), an error is returned when the content type is unknown.

    FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfiles, FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesArgs

    FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesItem, FieldLevelEncryptionConfigContentTypeProfileConfigContentTypeProfilesItemArgs

    ContentType string
    he content type for a field-level encryption content type-profile mapping. Valid value is application/x-www-form-urlencoded.
    Format string
    The format for a field-level encryption content type-profile mapping. Valid value is URLEncoded.
    ProfileId string
    ContentType string
    he content type for a field-level encryption content type-profile mapping. Valid value is application/x-www-form-urlencoded.
    Format string
    The format for a field-level encryption content type-profile mapping. Valid value is URLEncoded.
    ProfileId string
    contentType String
    he content type for a field-level encryption content type-profile mapping. Valid value is application/x-www-form-urlencoded.
    format String
    The format for a field-level encryption content type-profile mapping. Valid value is URLEncoded.
    profileId String
    contentType string
    he content type for a field-level encryption content type-profile mapping. Valid value is application/x-www-form-urlencoded.
    format string
    The format for a field-level encryption content type-profile mapping. Valid value is URLEncoded.
    profileId string
    content_type str
    he content type for a field-level encryption content type-profile mapping. Valid value is application/x-www-form-urlencoded.
    format str
    The format for a field-level encryption content type-profile mapping. Valid value is URLEncoded.
    profile_id str
    contentType String
    he content type for a field-level encryption content type-profile mapping. Valid value is application/x-www-form-urlencoded.
    format String
    The format for a field-level encryption content type-profile mapping. Valid value is URLEncoded.
    profileId String

    FieldLevelEncryptionConfigQueryArgProfileConfig, FieldLevelEncryptionConfigQueryArgProfileConfigArgs

    ForwardWhenQueryArgProfileIsUnknown bool
    Flag to set if you want a request to be forwarded to the origin even if the profile specified by the field-level encryption query argument, fle-profile, is unknown.
    QueryArgProfiles FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfiles
    Object that contains an attribute items that contains the list ofrofiles specified for query argument-profile mapping for field-level encryption. see Query Arg Profile.
    ForwardWhenQueryArgProfileIsUnknown bool
    Flag to set if you want a request to be forwarded to the origin even if the profile specified by the field-level encryption query argument, fle-profile, is unknown.
    QueryArgProfiles FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfiles
    Object that contains an attribute items that contains the list ofrofiles specified for query argument-profile mapping for field-level encryption. see Query Arg Profile.
    forwardWhenQueryArgProfileIsUnknown Boolean
    Flag to set if you want a request to be forwarded to the origin even if the profile specified by the field-level encryption query argument, fle-profile, is unknown.
    queryArgProfiles FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfiles
    Object that contains an attribute items that contains the list ofrofiles specified for query argument-profile mapping for field-level encryption. see Query Arg Profile.
    forwardWhenQueryArgProfileIsUnknown boolean
    Flag to set if you want a request to be forwarded to the origin even if the profile specified by the field-level encryption query argument, fle-profile, is unknown.
    queryArgProfiles FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfiles
    Object that contains an attribute items that contains the list ofrofiles specified for query argument-profile mapping for field-level encryption. see Query Arg Profile.
    forward_when_query_arg_profile_is_unknown bool
    Flag to set if you want a request to be forwarded to the origin even if the profile specified by the field-level encryption query argument, fle-profile, is unknown.
    query_arg_profiles FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfiles
    Object that contains an attribute items that contains the list ofrofiles specified for query argument-profile mapping for field-level encryption. see Query Arg Profile.
    forwardWhenQueryArgProfileIsUnknown Boolean
    Flag to set if you want a request to be forwarded to the origin even if the profile specified by the field-level encryption query argument, fle-profile, is unknown.
    queryArgProfiles Property Map
    Object that contains an attribute items that contains the list ofrofiles specified for query argument-profile mapping for field-level encryption. see Query Arg Profile.

    FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfiles, FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesArgs

    FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesItem, FieldLevelEncryptionConfigQueryArgProfileConfigQueryArgProfilesItemArgs

    ProfileId string
    QueryArg string
    Query argument for field-level encryption query argument-profile mapping.
    ProfileId string
    QueryArg string
    Query argument for field-level encryption query argument-profile mapping.
    profileId String
    queryArg String
    Query argument for field-level encryption query argument-profile mapping.
    profileId string
    queryArg string
    Query argument for field-level encryption query argument-profile mapping.
    profile_id str
    query_arg str
    Query argument for field-level encryption query argument-profile mapping.
    profileId String
    queryArg String
    Query argument for field-level encryption query argument-profile mapping.

    Import

    Using pulumi import, import Cloudfront Field Level Encryption Config using the id. For example:

    $ pulumi import aws:cloudfront/fieldLevelEncryptionConfig:FieldLevelEncryptionConfig config E74FTE3AEXAMPLE

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo
    AWS v6.72.0 published on Tuesday, Mar 11, 2025 by Pulumi
    pulumi/pulumi-aws