CloudFront Field Level Encryption profile is configured but not assigned to cache behavior

What it checks

CloudFront Field Level Encryption profile is configured but not assigned to cache behavior

Where it applies

Terraform: aws_cloudfront_field_level_encryption_profile

CloudFormation: no CloudFormation type maps to these resources yet.

How to fix it

1. Create an aws_cloudfront_field_level_encryption_config that references this profile and assign it to the relevant cache behavior.

Frameworks

• SOC 2 CC6.7
• HIPAA 164.312(a)(2)(iv)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules