# FieldLevelEncryptionProfileConfigProperty

The configuration of a field-level encryption profile.

- Source: Generated code
- Type last changed: v2.272.0 · 30 Sep 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_cloudfront as cloudfront } from 'aws-cdk-lib';
const fieldLevelEncryptionProfileConfigProperty: cloudfront.CfnFieldLevelEncryptionProfile.FieldLevelEncryptionProfileConfigProperty = {
  callerReference: 'callerReference',
  encryptionEntities: [{
    fieldPatterns: ['fieldPatterns'],
    providerId: 'providerId',
    publicKeyId: 'publicKeyId',
  }],
  name: 'name',

  // the properties below are optional
  comment: 'comment',
};
```

## Properties

- `callerReference`: string (required) — A unique value that identifies the creation request.

  Caller references are unique within an AWS account and cannot be changed after creation.

- `comment`: string — An optional comment describing the field-level encryption profile.

- `encryptionEntities`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnFieldLevelEncryptionProfile.EncryptionEntityProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_cloudfront.CfnFieldLevelEncryptionProfile.EncryptionEntityProperty.html)[] (required) — The encryption entities of the field-level encryption profile.

  At least one entity is required.

- `name`: string (required) — The name of the field-level encryption profile.

  Names are unique within an AWS account.