Support CloudFront Field Level Encryption Configurations

.changelog/12509.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_cloudfront_field_level_encryption_profile
+```

.changelog/15033.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_cloudfront_field_level_encryption_config
+```

aws/internal/service/cloudfront/finder/finder.go

@@ -54,3 +54,41 @@ func RealtimeLogConfigByARN(conn *cloudfront.CloudFront, arn string) (*cloudfron
 
 	return output.RealtimeLogConfig, nil
 }
+
+// FieldLevelEncryptionProfileByID returns the field level encryption profile corresponding to the specified ID.
+// Returns nil if no configuration is found.
+func FieldLevelEncryptionProfileByID(conn *cloudfront.CloudFront, id string) (*cloudfront.GetFieldLevelEncryptionProfileOutput, error) {
+	input := &cloudfront.GetFieldLevelEncryptionProfileInput{
+		Id: aws.String(id),
+	}
+
+	output, err := conn.GetFieldLevelEncryptionProfile(input)
+	if err != nil {
+		return nil, err
+	}
+
+	if output == nil {
+		return nil, nil
+	}
+
+	return output, nil
+}
+
+// FieldLevelEncryptionConfigByID returns the field level encryption config corresponding to the specified ID.
+// Returns nil if no configuration is found.
+func FieldLevelEncryptionConfigByID(conn *cloudfront.CloudFront, id string) (*cloudfront.GetFieldLevelEncryptionConfigOutput, error) {
+	input := &cloudfront.GetFieldLevelEncryptionConfigInput{
+		Id: aws.String(id),
+	}
+
+	output, err := conn.GetFieldLevelEncryptionConfig(input)
+	if err != nil {
+		return nil, err
+	}
+
+	if output == nil {
+		return nil, nil
+	}
+
+	return output, nil
+}

aws/provider.go

@@ -535,6 +535,8 @@ func Provider() *schema.Provider {
 			"aws_cloudformation_type":                                 resourceAwsCloudFormationType(),
 			"aws_cloudfront_cache_policy":                             resourceAwsCloudFrontCachePolicy(),
 			"aws_cloudfront_distribution":                             resourceAwsCloudFrontDistribution(),
+			"aws_cloudfront_field_level_encryption_profile":           resourceAwsCloudfrontFieldLevelEncryptionProfile(),
+			"aws_cloudfront_field_level_encryption_config":            resourceAwsCloudfrontFieldLevelEncryptionConfig(),
 			"aws_cloudfront_function":                                 resourceAwsCloudFrontFunction(),
 			"aws_cloudfront_key_group":                                resourceAwsCloudFrontKeyGroup(),
 			"aws_cloudfront_origin_access_identity":                   resourceAwsCloudFrontOriginAccessIdentity(),