CloudFront Field-Level Not Encrypted

Tenacity Id

Risk Level




Last Updated:

April 21, 2022

The CloudFront distribution is not configured with field-level encryption. Field-level encryption for CloudFront distributions add an additional layer of security that protects specific data processed so that only certain applications can see it. Without field-level encryption, sensitve data could be exposed to unauthorized or unintended applications or application compontents. CloudFront distributions should be configured with field-level encryption.