aws-sdk-cloudfront 1.1.0 → 1.2.0

data/lib/aws-sdk-cloudfront/types.rb

@@ -50,7 +50,7 @@ module Aws::CloudFront
     #   For more information, see ActiveTrustedSigners.
     #   @return [Array<Types::Signer>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ActiveTrustedSigners AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ActiveTrustedSigners AWS API Documentation
     #
     class ActiveTrustedSigners < Struct.new(
       :enabled,
@@ -80,7 +80,7 @@ module Aws::CloudFront
     #   want to associate with this distribution.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Aliases AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Aliases AWS API Documentation
     #
     class Aliases < Struct.new(
       :quantity,
@@ -143,7 +143,7 @@ module Aws::CloudFront
     #   to be cached correctly.
     #   @return [Types::CachedMethods]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/AllowedMethods AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/AllowedMethods AWS API Documentation
     #
     class AllowedMethods < Struct.new(
       :quantity,
@@ -233,11 +233,12 @@ module Aws::CloudFront
     #           quantity: 1, # required
     #           items: [
     #             {
-    #               lambda_function_arn: "string",
-    #               event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #               lambda_function_arn: "LambdaFunctionARN", # required
+    #               event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #             },
     #           ],
     #         },
+    #         field_level_encryption_id: "string",
     #       }
     #
     # @!attribute [rw] path_pattern
@@ -430,7 +431,10 @@ module Aws::CloudFront
     #   associations for a cache behavior.
     #   @return [Types::LambdaFunctionAssociations]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CacheBehavior AWS API Documentation
+    # @!attribute [rw] field_level_encryption_id
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CacheBehavior AWS API Documentation
     #
     class CacheBehavior < Struct.new(
       :path_pattern,
@@ -444,7 +448,8 @@ module Aws::CloudFront
       :default_ttl,
       :max_ttl,
       :compress,
-      :lambda_function_associations)
+      :lambda_function_associations,
+      :field_level_encryption_id)
       include Aws::Structure
     end
 
@@ -500,11 +505,12 @@ module Aws::CloudFront
     #               quantity: 1, # required
     #               items: [
     #                 {
-    #                   lambda_function_arn: "string",
-    #                   event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                   lambda_function_arn: "LambdaFunctionARN", # required
+    #                   event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #                 },
     #               ],
     #             },
+    #             field_level_encryption_id: "string",
     #           },
     #         ],
     #       }
@@ -518,7 +524,7 @@ module Aws::CloudFront
     #   distribution. If `Quantity` is `0`, you can omit `Items`.
     #   @return [Array<Types::CacheBehavior>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CacheBehaviors AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CacheBehaviors AWS API Documentation
     #
     class CacheBehaviors < Struct.new(
       :quantity,
@@ -559,7 +565,7 @@ module Aws::CloudFront
     #   CloudFront to cache responses to.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CachedMethods AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CachedMethods AWS API Documentation
     #
     class CachedMethods < Struct.new(
       :quantity,
@@ -584,7 +590,7 @@ module Aws::CloudFront
     #   The current configuration information for the identity.
     #   @return [Types::CloudFrontOriginAccessIdentityConfig]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CloudFrontOriginAccessIdentity AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CloudFrontOriginAccessIdentity AWS API Documentation
     #
     class CloudFrontOriginAccessIdentity < Struct.new(
       :id,
@@ -628,7 +634,7 @@ module Aws::CloudFront
     #   Any comments you want to include about the origin access identity.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CloudFrontOriginAccessIdentityConfig AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CloudFrontOriginAccessIdentityConfig AWS API Documentation
     #
     class CloudFrontOriginAccessIdentityConfig < Struct.new(
       :caller_reference,
@@ -682,7 +688,7 @@ module Aws::CloudFront
     #   access identity that was created by the current AWS account.
     #   @return [Array<Types::CloudFrontOriginAccessIdentitySummary>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CloudFrontOriginAccessIdentityList AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CloudFrontOriginAccessIdentityList AWS API Documentation
     #
     class CloudFrontOriginAccessIdentityList < Struct.new(
       :marker,
@@ -712,7 +718,7 @@ module Aws::CloudFront
     #   when created.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CloudFrontOriginAccessIdentitySummary AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CloudFrontOriginAccessIdentitySummary AWS API Documentation
     #
     class CloudFrontOriginAccessIdentitySummary < Struct.new(
       :id,
@@ -721,6 +727,113 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # A field-level encryption content type profile.
+    #
+    # @note When making an API call, you may pass ContentTypeProfile
+    #   data as a hash:
+    #
+    #       {
+    #         format: "URLEncoded", # required, accepts URLEncoded
+    #         profile_id: "string",
+    #         content_type: "string", # required
+    #       }
+    #
+    # @!attribute [rw] format
+    #   The format for a field-level encryption content type-profile
+    #   mapping.
+    #   @return [String]
+    #
+    # @!attribute [rw] profile_id
+    #   The profile ID for a field-level encryption content type-profile
+    #   mapping.
+    #   @return [String]
+    #
+    # @!attribute [rw] content_type
+    #   The content type for a field-level encryption content type-profile
+    #   mapping.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ContentTypeProfile AWS API Documentation
+    #
+    class ContentTypeProfile < Struct.new(
+      :format,
+      :profile_id,
+      :content_type)
+      include Aws::Structure
+    end
+
+    # The configuration for a field-level encryption content type-profile
+    # mapping.
+    #
+    # @note When making an API call, you may pass ContentTypeProfileConfig
+    #   data as a hash:
+    #
+    #       {
+    #         forward_when_content_type_is_unknown: false, # required
+    #         content_type_profiles: {
+    #           quantity: 1, # required
+    #           items: [
+    #             {
+    #               format: "URLEncoded", # required, accepts URLEncoded
+    #               profile_id: "string",
+    #               content_type: "string", # required
+    #             },
+    #           ],
+    #         },
+    #       }
+    #
+    # @!attribute [rw] forward_when_content_type_is_unknown
+    #   The setting in a field-level encryption content type-profile mapping
+    #   that specifies what to do when an unknown content type is provided
+    #   for the profile. If true, content is forwarded without being
+    #   encrypted when the content type is unknown. If false (the default),
+    #   an error is returned when the content type is unknown.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] content_type_profiles
+    #   The configuration for a field-level encryption content type-profile.
+    #   @return [Types::ContentTypeProfiles]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ContentTypeProfileConfig AWS API Documentation
+    #
+    class ContentTypeProfileConfig < Struct.new(
+      :forward_when_content_type_is_unknown,
+      :content_type_profiles)
+      include Aws::Structure
+    end
+
+    # Field-level encryption content type-profile.
+    #
+    # @note When making an API call, you may pass ContentTypeProfiles
+    #   data as a hash:
+    #
+    #       {
+    #         quantity: 1, # required
+    #         items: [
+    #           {
+    #             format: "URLEncoded", # required, accepts URLEncoded
+    #             profile_id: "string",
+    #             content_type: "string", # required
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] quantity
+    #   The number of field-level encryption content type-profile mappings.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] items
+    #   Items in a field-level encryption content type-profile mapping.
+    #   @return [Array<Types::ContentTypeProfile>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ContentTypeProfiles AWS API Documentation
+    #
+    class ContentTypeProfiles < Struct.new(
+      :quantity,
+      :items)
+      include Aws::Structure
+    end
+
     # A complex type that specifies whether you want CloudFront to forward
     # cookies to the origin and, if so, which ones. For more information
     # about forwarding cookies to the origin, see [How CloudFront Forwards,
@@ -750,7 +863,7 @@ module Aws::CloudFront
     #   behavior.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CookieNames AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CookieNames AWS API Documentation
     #
     class CookieNames < Struct.new(
       :quantity,
@@ -810,7 +923,7 @@ module Aws::CloudFront
     #   [1]: http://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html#limits_cloudfront
     #   @return [Types::CookieNames]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CookiePreference AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CookiePreference AWS API Documentation
     #
     class CookiePreference < Struct.new(
       :forward,
@@ -834,7 +947,7 @@ module Aws::CloudFront
     #   The current configuration information for the identity.
     #   @return [Types::CloudFrontOriginAccessIdentityConfig]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateCloudFrontOriginAccessIdentityRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateCloudFrontOriginAccessIdentityRequest AWS API Documentation
     #
     class CreateCloudFrontOriginAccessIdentityRequest < Struct.new(
       :cloud_front_origin_access_identity_config)
@@ -857,7 +970,7 @@ module Aws::CloudFront
     #   The current version of the origin access identity created.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateCloudFrontOriginAccessIdentityResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateCloudFrontOriginAccessIdentityResult AWS API Documentation
     #
     class CreateCloudFrontOriginAccessIdentityResult < Struct.new(
       :cloud_front_origin_access_identity,
@@ -955,11 +1068,12 @@ module Aws::CloudFront
     #               quantity: 1, # required
     #               items: [
     #                 {
-    #                   lambda_function_arn: "string",
-    #                   event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                   lambda_function_arn: "LambdaFunctionARN", # required
+    #                   event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #                 },
     #               ],
     #             },
+    #             field_level_encryption_id: "string",
     #           },
     #           cache_behaviors: {
     #             quantity: 1, # required
@@ -1008,11 +1122,12 @@ module Aws::CloudFront
     #                   quantity: 1, # required
     #                   items: [
     #                     {
-    #                       lambda_function_arn: "string",
-    #                       event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                       lambda_function_arn: "LambdaFunctionARN", # required
+    #                       event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #                     },
     #                   ],
     #                 },
+    #                 field_level_encryption_id: "string",
     #               },
     #             ],
     #           },
@@ -1062,7 +1177,7 @@ module Aws::CloudFront
     #   The distribution's configuration information.
     #   @return [Types::DistributionConfig]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateDistributionRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateDistributionRequest AWS API Documentation
     #
     class CreateDistributionRequest < Struct.new(
       :distribution_config)
@@ -1085,7 +1200,7 @@ module Aws::CloudFront
     #   The current version of the distribution created.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateDistributionResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateDistributionResult AWS API Documentation
     #
     class CreateDistributionResult < Struct.new(
       :distribution,
@@ -1184,11 +1299,12 @@ module Aws::CloudFront
     #                 quantity: 1, # required
     #                 items: [
     #                   {
-    #                     lambda_function_arn: "string",
-    #                     event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                     lambda_function_arn: "LambdaFunctionARN", # required
+    #                     event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #                   },
     #                 ],
     #               },
+    #               field_level_encryption_id: "string",
     #             },
     #             cache_behaviors: {
     #               quantity: 1, # required
@@ -1237,11 +1353,12 @@ module Aws::CloudFront
     #                     quantity: 1, # required
     #                     items: [
     #                       {
-    #                         lambda_function_arn: "string",
-    #                         event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                         lambda_function_arn: "LambdaFunctionARN", # required
+    #                         event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #                       },
     #                     ],
     #                   },
+    #                   field_level_encryption_id: "string",
     #                 },
     #               ],
     #             },
@@ -1300,7 +1417,7 @@ module Aws::CloudFront
     #   The distribution's configuration information.
     #   @return [Types::DistributionConfigWithTags]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateDistributionWithTagsRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateDistributionWithTagsRequest AWS API Documentation
     #
     class CreateDistributionWithTagsRequest < Struct.new(
       :distribution_config_with_tags)
@@ -1323,7 +1440,7 @@ module Aws::CloudFront
     #   The current version of the distribution created.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateDistributionWithTagsResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateDistributionWithTagsResult AWS API Documentation
     #
     class CreateDistributionWithTagsResult < Struct.new(
       :distribution,
@@ -1332,6 +1449,135 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass CreateFieldLevelEncryptionConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         field_level_encryption_config: { # required
+    #           caller_reference: "string", # required
+    #           comment: "string",
+    #           query_arg_profile_config: {
+    #             forward_when_query_arg_profile_is_unknown: false, # required
+    #             query_arg_profiles: {
+    #               quantity: 1, # required
+    #               items: [
+    #                 {
+    #                   query_arg: "string", # required
+    #                   profile_id: "string", # required
+    #                 },
+    #               ],
+    #             },
+    #           },
+    #           content_type_profile_config: {
+    #             forward_when_content_type_is_unknown: false, # required
+    #             content_type_profiles: {
+    #               quantity: 1, # required
+    #               items: [
+    #                 {
+    #                   format: "URLEncoded", # required, accepts URLEncoded
+    #                   profile_id: "string",
+    #                   content_type: "string", # required
+    #                 },
+    #               ],
+    #             },
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] field_level_encryption_config
+    #   The request to create a new field-level encryption configuration.
+    #   @return [Types::FieldLevelEncryptionConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateFieldLevelEncryptionConfigRequest AWS API Documentation
+    #
+    class CreateFieldLevelEncryptionConfigRequest < Struct.new(
+      :field_level_encryption_config)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] field_level_encryption
+    #   Returned when you create a new field-level encryption configuration.
+    #   @return [Types::FieldLevelEncryption]
+    #
+    # @!attribute [rw] location
+    #   The fully qualified URI of the new configuration resource just
+    #   created. For example:
+    #   `https://cloudfront.amazonaws.com/2010-11-01/field-level-encryption-config/EDFDVBD632BHDS5`.
+    #   @return [String]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the field level encryption configuration. For
+    #   example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateFieldLevelEncryptionConfigResult AWS API Documentation
+    #
+    class CreateFieldLevelEncryptionConfigResult < Struct.new(
+      :field_level_encryption,
+      :location,
+      :etag)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass CreateFieldLevelEncryptionProfileRequest
+    #   data as a hash:
+    #
+    #       {
+    #         field_level_encryption_profile_config: { # required
+    #           name: "string", # required
+    #           caller_reference: "string", # required
+    #           comment: "string",
+    #           encryption_entities: { # required
+    #             quantity: 1, # required
+    #             items: [
+    #               {
+    #                 public_key_id: "string", # required
+    #                 provider_id: "string", # required
+    #                 field_patterns: { # required
+    #                   quantity: 1, # required
+    #                   items: ["string"],
+    #                 },
+    #               },
+    #             ],
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] field_level_encryption_profile_config
+    #   The request to create a field-level encryption profile.
+    #   @return [Types::FieldLevelEncryptionProfileConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateFieldLevelEncryptionProfileRequest AWS API Documentation
+    #
+    class CreateFieldLevelEncryptionProfileRequest < Struct.new(
+      :field_level_encryption_profile_config)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] field_level_encryption_profile
+    #   Returned when you create a new field-level encryption profile.
+    #   @return [Types::FieldLevelEncryptionProfile]
+    #
+    # @!attribute [rw] location
+    #   The fully qualified URI of the new profile resource just created.
+    #   For example:
+    #   `https://cloudfront.amazonaws.com/2010-11-01/field-level-encryption-profile/EDFDVBD632BHDS5`.
+    #   @return [String]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the field level encryption profile. For
+    #   example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateFieldLevelEncryptionProfileResult AWS API Documentation
+    #
+    class CreateFieldLevelEncryptionProfileResult < Struct.new(
+      :field_level_encryption_profile,
+      :location,
+      :etag)
+      include Aws::Structure
+    end
+
     # The request to create an invalidation.
     #
     # @note When making an API call, you may pass CreateInvalidationRequest
@@ -1356,7 +1602,7 @@ module Aws::CloudFront
     #   The batch information for the invalidation.
     #   @return [Types::InvalidationBatch]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateInvalidationRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateInvalidationRequest AWS API Documentation
     #
     class CreateInvalidationRequest < Struct.new(
       :distribution_id,
@@ -1375,7 +1621,7 @@ module Aws::CloudFront
     #   The invalidation's information.
     #   @return [Types::Invalidation]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateInvalidationResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateInvalidationResult AWS API Documentation
     #
     class CreateInvalidationResult < Struct.new(
       :location,
@@ -1383,6 +1629,53 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass CreatePublicKeyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         public_key_config: { # required
+    #           caller_reference: "string", # required
+    #           name: "string", # required
+    #           encoded_key: "string", # required
+    #           comment: "string",
+    #         },
+    #       }
+    #
+    # @!attribute [rw] public_key_config
+    #   The request to add a public key to CloudFront.
+    #   @return [Types::PublicKeyConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreatePublicKeyRequest AWS API Documentation
+    #
+    class CreatePublicKeyRequest < Struct.new(
+      :public_key_config)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] public_key
+    #   Returned when you add a public key.
+    #   @return [Types::PublicKey]
+    #
+    # @!attribute [rw] location
+    #   The fully qualified URI of the new public key resource just created.
+    #   For example:
+    #   `https://cloudfront.amazonaws.com/2010-11-01/cloudfront-public-key/EDFDVBD632BHDS5`.
+    #   @return [String]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the public key. For example:
+    #   `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreatePublicKeyResult AWS API Documentation
+    #
+    class CreatePublicKeyResult < Struct.new(
+      :public_key,
+      :location,
+      :etag)
+      include Aws::Structure
+    end
+
     # The request to create a new streaming distribution.
     #
     # @note When making an API call, you may pass CreateStreamingDistributionRequest
@@ -1419,7 +1712,7 @@ module Aws::CloudFront
     #   The streaming distribution's configuration information.
     #   @return [Types::StreamingDistributionConfig]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateStreamingDistributionRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateStreamingDistributionRequest AWS API Documentation
     #
     class CreateStreamingDistributionRequest < Struct.new(
       :streaming_distribution_config)
@@ -1442,7 +1735,7 @@ module Aws::CloudFront
     #   The current version of the streaming distribution created.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateStreamingDistributionResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateStreamingDistributionResult AWS API Documentation
     #
     class CreateStreamingDistributionResult < Struct.new(
       :streaming_distribution,
@@ -1497,7 +1790,7 @@ module Aws::CloudFront
     #   The streaming distribution's configuration information.
     #   @return [Types::StreamingDistributionConfigWithTags]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateStreamingDistributionWithTagsRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateStreamingDistributionWithTagsRequest AWS API Documentation
     #
     class CreateStreamingDistributionWithTagsRequest < Struct.new(
       :streaming_distribution_config_with_tags)
@@ -1519,7 +1812,7 @@ module Aws::CloudFront
     # @!attribute [rw] etag
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CreateStreamingDistributionWithTagsResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CreateStreamingDistributionWithTagsResult AWS API Documentation
     #
     class CreateStreamingDistributionWithTagsResult < Struct.new(
       :streaming_distribution,
@@ -1630,7 +1923,7 @@ module Aws::CloudFront
     #   [1]: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/custom-error-pages.html
     #   @return [Integer]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CustomErrorResponse AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CustomErrorResponse AWS API Documentation
     #
     class CustomErrorResponse < Struct.new(
       :error_code,
@@ -1683,7 +1976,7 @@ module Aws::CloudFront
     #   page and/or a caching duration.
     #   @return [Array<Types::CustomErrorResponse>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CustomErrorResponses AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CustomErrorResponses AWS API Documentation
     #
     class CustomErrorResponses < Struct.new(
       :quantity,
@@ -1717,7 +2010,7 @@ module Aws::CloudFront
     #   origin. If Quantity is `0`, omit `Items`.
     #   @return [Array<Types::OriginCustomHeader>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CustomHeaders AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CustomHeaders AWS API Documentation
     #
     class CustomHeaders < Struct.new(
       :quantity,
@@ -1787,7 +2080,7 @@ module Aws::CloudFront
     #   [1]: https://console.aws.amazon.com/support/home#/
     #   @return [Integer]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/CustomOriginConfig AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/CustomOriginConfig AWS API Documentation
     #
     class CustomOriginConfig < Struct.new(
       :http_port,
@@ -1850,11 +2143,12 @@ module Aws::CloudFront
     #           quantity: 1, # required
     #           items: [
     #             {
-    #               lambda_function_arn: "string",
-    #               event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #               lambda_function_arn: "LambdaFunctionARN", # required
+    #               event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #             },
     #           ],
     #         },
+    #         field_level_encryption_id: "string",
     #       }
     #
     # @!attribute [rw] target_origin_id
@@ -2010,7 +2304,10 @@ module Aws::CloudFront
     #   associations for a cache behavior.
     #   @return [Types::LambdaFunctionAssociations]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/DefaultCacheBehavior AWS API Documentation
+    # @!attribute [rw] field_level_encryption_id
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DefaultCacheBehavior AWS API Documentation
     #
     class DefaultCacheBehavior < Struct.new(
       :target_origin_id,
@@ -2023,7 +2320,8 @@ module Aws::CloudFront
       :default_ttl,
       :max_ttl,
       :compress,
-      :lambda_function_associations)
+      :lambda_function_associations,
+      :field_level_encryption_id)
       include Aws::Structure
     end
 
@@ -2046,7 +2344,7 @@ module Aws::CloudFront
     #   `PUT` request. For example: `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/DeleteCloudFrontOriginAccessIdentityRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DeleteCloudFrontOriginAccessIdentityRequest AWS API Documentation
     #
     class DeleteCloudFrontOriginAccessIdentityRequest < Struct.new(
       :id,
@@ -2115,7 +2413,7 @@ module Aws::CloudFront
     #   the distribution. For example: `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/DeleteDistributionRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DeleteDistributionRequest AWS API Documentation
     #
     class DeleteDistributionRequest < Struct.new(
       :id,
@@ -2123,6 +2421,81 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DeleteFieldLevelEncryptionConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         id: "string", # required
+    #         if_match: "string",
+    #       }
+    #
+    # @!attribute [rw] id
+    #   The ID of the configuration you want to delete from CloudFront.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The value of the `ETag` header that you received when retrieving the
+    #   configuration identity to delete. For example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DeleteFieldLevelEncryptionConfigRequest AWS API Documentation
+    #
+    class DeleteFieldLevelEncryptionConfigRequest < Struct.new(
+      :id,
+      :if_match)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DeleteFieldLevelEncryptionProfileRequest
+    #   data as a hash:
+    #
+    #       {
+    #         id: "string", # required
+    #         if_match: "string",
+    #       }
+    #
+    # @!attribute [rw] id
+    #   Request the ID of the profile you want to delete from CloudFront.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The value of the `ETag` header that you received when retrieving the
+    #   profile to delete. For example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DeleteFieldLevelEncryptionProfileRequest AWS API Documentation
+    #
+    class DeleteFieldLevelEncryptionProfileRequest < Struct.new(
+      :id,
+      :if_match)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DeletePublicKeyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         id: "string", # required
+    #         if_match: "string",
+    #       }
+    #
+    # @!attribute [rw] id
+    #   The ID of the public key you want to remove from CloudFront.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The value of the `ETag` header that you received when retrieving the
+    #   public key identity to delete. For example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DeletePublicKeyRequest AWS API Documentation
+    #
+    class DeletePublicKeyRequest < Struct.new(
+      :id,
+      :if_match)
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass DeleteServiceLinkedRoleRequest
     #   data as a hash:
     #
@@ -2133,7 +2506,7 @@ module Aws::CloudFront
     # @!attribute [rw] role_name
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/DeleteServiceLinkedRoleRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DeleteServiceLinkedRoleRequest AWS API Documentation
     #
     class DeleteServiceLinkedRoleRequest < Struct.new(
       :role_name)
@@ -2159,7 +2532,7 @@ module Aws::CloudFront
     #   the streaming distribution. For example: `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/DeleteStreamingDistributionRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DeleteStreamingDistributionRequest AWS API Documentation
     #
     class DeleteStreamingDistributionRequest < Struct.new(
       :id,
@@ -2216,7 +2589,7 @@ module Aws::CloudFront
     #   ID/config` resource.
     #   @return [Types::DistributionConfig]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Distribution AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Distribution AWS API Documentation
     #
     class Distribution < Struct.new(
       :id,
@@ -2318,11 +2691,12 @@ module Aws::CloudFront
     #             quantity: 1, # required
     #             items: [
     #               {
-    #                 lambda_function_arn: "string",
-    #                 event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                 lambda_function_arn: "LambdaFunctionARN", # required
+    #                 event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #               },
     #             ],
     #           },
+    #           field_level_encryption_id: "string",
     #         },
     #         cache_behaviors: {
     #           quantity: 1, # required
@@ -2371,11 +2745,12 @@ module Aws::CloudFront
     #                 quantity: 1, # required
     #                 items: [
     #                   {
-    #                     lambda_function_arn: "string",
-    #                     event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                     lambda_function_arn: "LambdaFunctionARN", # required
+    #                     event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #                   },
     #                 ],
     #               },
+    #               field_level_encryption_id: "string",
     #             },
     #           ],
     #         },
@@ -2750,7 +3125,7 @@ module Aws::CloudFront
     #   [2]: http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-cloudfront-distribution.html
     #   @return [Boolean]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/DistributionConfig AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DistributionConfig AWS API Documentation
     #
     class DistributionConfig < Struct.new(
       :caller_reference,
@@ -2862,11 +3237,12 @@ module Aws::CloudFront
     #               quantity: 1, # required
     #               items: [
     #                 {
-    #                   lambda_function_arn: "string",
-    #                   event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                   lambda_function_arn: "LambdaFunctionARN", # required
+    #                   event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #                 },
     #               ],
     #             },
+    #             field_level_encryption_id: "string",
     #           },
     #           cache_behaviors: {
     #             quantity: 1, # required
@@ -2915,11 +3291,12 @@ module Aws::CloudFront
     #                   quantity: 1, # required
     #                   items: [
     #                     {
-    #                       lambda_function_arn: "string",
-    #                       event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                       lambda_function_arn: "LambdaFunctionARN", # required
+    #                       event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #                     },
     #                   ],
     #                 },
+    #                 field_level_encryption_id: "string",
     #               },
     #             ],
     #           },
@@ -2981,7 +3358,7 @@ module Aws::CloudFront
     #   A complex type that contains zero or more `Tag` elements.
     #   @return [Types::Tags]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/DistributionConfigWithTags AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DistributionConfigWithTags AWS API Documentation
     #
     class DistributionConfigWithTags < Struct.new(
       :distribution_config,
@@ -3022,7 +3399,7 @@ module Aws::CloudFront
     #   each distribution that was created by the current AWS account.
     #   @return [Array<Types::DistributionSummary>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/DistributionList AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DistributionList AWS API Documentation
     #
     class DistributionList < Struct.new(
       :marker,
@@ -3223,7 +3600,7 @@ module Aws::CloudFront
     #   address for your distribution.
     #   @return [Boolean]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/DistributionSummary AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/DistributionSummary AWS API Documentation
     #
     class DistributionSummary < Struct.new(
       :id,
@@ -3247,40 +3624,453 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
-    # A complex type that specifies how CloudFront handles query strings and
-    # cookies.
+    # Complex data type for field-level encryption profiles that includes
+    # all of the encryption entities.
     #
-    # @note When making an API call, you may pass ForwardedValues
+    # @note When making an API call, you may pass EncryptionEntities
     #   data as a hash:
     #
     #       {
-    #         query_string: false, # required
-    #         cookies: { # required
-    #           forward: "none", # required, accepts none, whitelist, all
-    #           whitelisted_names: {
-    #             quantity: 1, # required
-    #             items: ["string"],
+    #         quantity: 1, # required
+    #         items: [
+    #           {
+    #             public_key_id: "string", # required
+    #             provider_id: "string", # required
+    #             field_patterns: { # required
+    #               quantity: 1, # required
+    #               items: ["string"],
+    #             },
     #           },
-    #         },
-    #         headers: {
-    #           quantity: 1, # required
-    #           items: ["string"],
-    #         },
-    #         query_string_cache_keys: {
-    #           quantity: 1, # required
-    #           items: ["string"],
-    #         },
+    #         ],
     #       }
     #
-    # @!attribute [rw] query_string
-    #   Indicates whether you want CloudFront to forward query strings to
-    #   the origin that is associated with this cache behavior and cache
-    #   based on the query string parameters. CloudFront behavior depends on
-    #   the value of `QueryString` and on the values that you specify for
-    #   `QueryStringCacheKeys`, if any:
+    # @!attribute [rw] quantity
+    #   Number of field pattern items in a field-level encryption content
+    #   type-profile mapping.
+    #   @return [Integer]
     #
-    #   If you specify true for `QueryString` and you don't specify any
-    #   values for `QueryStringCacheKeys`, CloudFront forwards all query
+    # @!attribute [rw] items
+    #   An array of field patterns in a field-level encryption content
+    #   type-profile mapping.
+    #   @return [Array<Types::EncryptionEntity>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/EncryptionEntities AWS API Documentation
+    #
+    class EncryptionEntities < Struct.new(
+      :quantity,
+      :items)
+      include Aws::Structure
+    end
+
+    # Complex data type for field-level encryption profiles that includes
+    # the encryption key and field pattern specifications.
+    #
+    # @note When making an API call, you may pass EncryptionEntity
+    #   data as a hash:
+    #
+    #       {
+    #         public_key_id: "string", # required
+    #         provider_id: "string", # required
+    #         field_patterns: { # required
+    #           quantity: 1, # required
+    #           items: ["string"],
+    #         },
+    #       }
+    #
+    # @!attribute [rw] public_key_id
+    #   The public key associated with a set of field-level encryption
+    #   patterns, to be used when encrypting the fields that match the
+    #   patterns.
+    #   @return [String]
+    #
+    # @!attribute [rw] provider_id
+    #   The provider associated with the public key being used for
+    #   encryption. This value must also be provided with the private key
+    #   for applications to be able to decrypt data.
+    #   @return [String]
+    #
+    # @!attribute [rw] field_patterns
+    #   Field patterns in a field-level encryption content type profile
+    #   specify the fields that you want to be encrypted. You can provide
+    #   the full field name, or any beginning characters followed by a
+    #   wildcard (*). You can't overlap field patterns. For example, you
+    #   can't have both ABC* and AB*. Note that field patterns are
+    #   case-sensitive.
+    #   @return [Types::FieldPatterns]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/EncryptionEntity AWS API Documentation
+    #
+    class EncryptionEntity < Struct.new(
+      :public_key_id,
+      :provider_id,
+      :field_patterns)
+      include Aws::Structure
+    end
+
+    # A complex data type that includes the profile configurations and other
+    # options specified for field-level encryption.
+    #
+    # @!attribute [rw] id
+    #   The configuration ID for a field-level encryption configuration
+    #   which includes a set of profiles that specify certain selected data
+    #   fields to be encrypted by specific public keys.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_modified_time
+    #   The last time the field-level encryption configuration was changed.
+    #   @return [Time]
+    #
+    # @!attribute [rw] field_level_encryption_config
+    #   A complex data type that includes the profile configurations
+    #   specified for field-level encryption.
+    #   @return [Types::FieldLevelEncryptionConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/FieldLevelEncryption AWS API Documentation
+    #
+    class FieldLevelEncryption < Struct.new(
+      :id,
+      :last_modified_time,
+      :field_level_encryption_config)
+      include Aws::Structure
+    end
+
+    # A complex data type that includes the profile configurations specified
+    # for field-level encryption.
+    #
+    # @note When making an API call, you may pass FieldLevelEncryptionConfig
+    #   data as a hash:
+    #
+    #       {
+    #         caller_reference: "string", # required
+    #         comment: "string",
+    #         query_arg_profile_config: {
+    #           forward_when_query_arg_profile_is_unknown: false, # required
+    #           query_arg_profiles: {
+    #             quantity: 1, # required
+    #             items: [
+    #               {
+    #                 query_arg: "string", # required
+    #                 profile_id: "string", # required
+    #               },
+    #             ],
+    #           },
+    #         },
+    #         content_type_profile_config: {
+    #           forward_when_content_type_is_unknown: false, # required
+    #           content_type_profiles: {
+    #             quantity: 1, # required
+    #             items: [
+    #               {
+    #                 format: "URLEncoded", # required, accepts URLEncoded
+    #                 profile_id: "string",
+    #                 content_type: "string", # required
+    #               },
+    #             ],
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] caller_reference
+    #   A unique number that ensures the request can't be replayed.
+    #   @return [String]
+    #
+    # @!attribute [rw] comment
+    #   An optional comment about the configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] query_arg_profile_config
+    #   A complex data type that specifies when to forward content if a
+    #   profile isn't found and the profile that can be provided as a query
+    #   argument in a request.
+    #   @return [Types::QueryArgProfileConfig]
+    #
+    # @!attribute [rw] content_type_profile_config
+    #   A complex data type that specifies when to forward content if a
+    #   content type isn't recognized and profiles to use as by default in
+    #   a request if a query argument doesn't specify a profile to use.
+    #   @return [Types::ContentTypeProfileConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/FieldLevelEncryptionConfig AWS API Documentation
+    #
+    class FieldLevelEncryptionConfig < Struct.new(
+      :caller_reference,
+      :comment,
+      :query_arg_profile_config,
+      :content_type_profile_config)
+      include Aws::Structure
+    end
+
+    # List of field-level encrpytion configurations.
+    #
+    # @!attribute [rw] next_marker
+    #   If there are more elements to be listed, this element is present and
+    #   contains the value that you can use for the `Marker` request
+    #   parameter to continue listing your configurations where you left
+    #   off.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of elements you want in the response body.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] quantity
+    #   The number of field-level encryption items.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] items
+    #   An array of field-level encryption items.
+    #   @return [Array<Types::FieldLevelEncryptionSummary>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/FieldLevelEncryptionList AWS API Documentation
+    #
+    class FieldLevelEncryptionList < Struct.new(
+      :next_marker,
+      :max_items,
+      :quantity,
+      :items)
+      include Aws::Structure
+    end
+
+    # A complex data type for field-level encryption profiles.
+    #
+    # @!attribute [rw] id
+    #   The ID for a field-level encryption profile configuration which
+    #   includes a set of profiles that specify certain selected data fields
+    #   to be encrypted by specific public keys.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_modified_time
+    #   The last time the field-level encryption profile was updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] field_level_encryption_profile_config
+    #   A complex data type that includes the profile name and the
+    #   encryption entities for the field-level encryption profile.
+    #   @return [Types::FieldLevelEncryptionProfileConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/FieldLevelEncryptionProfile AWS API Documentation
+    #
+    class FieldLevelEncryptionProfile < Struct.new(
+      :id,
+      :last_modified_time,
+      :field_level_encryption_profile_config)
+      include Aws::Structure
+    end
+
+    # A complex data type of profiles for the field-level encryption.
+    #
+    # @note When making an API call, you may pass FieldLevelEncryptionProfileConfig
+    #   data as a hash:
+    #
+    #       {
+    #         name: "string", # required
+    #         caller_reference: "string", # required
+    #         comment: "string",
+    #         encryption_entities: { # required
+    #           quantity: 1, # required
+    #           items: [
+    #             {
+    #               public_key_id: "string", # required
+    #               provider_id: "string", # required
+    #               field_patterns: { # required
+    #                 quantity: 1, # required
+    #                 items: ["string"],
+    #               },
+    #             },
+    #           ],
+    #         },
+    #       }
+    #
+    # @!attribute [rw] name
+    #   Profile name for the field-level encryption profile.
+    #   @return [String]
+    #
+    # @!attribute [rw] caller_reference
+    #   A unique number that ensures the request can't be replayed.
+    #   @return [String]
+    #
+    # @!attribute [rw] comment
+    #   An optional comment for the field-level encryption profile.
+    #   @return [String]
+    #
+    # @!attribute [rw] encryption_entities
+    #   A complex data type of encryption entities for the field-level
+    #   encryption profile that include the public key ID, provider, and
+    #   field patterns for specifying which fields to encrypt with this key.
+    #   @return [Types::EncryptionEntities]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/FieldLevelEncryptionProfileConfig AWS API Documentation
+    #
+    class FieldLevelEncryptionProfileConfig < Struct.new(
+      :name,
+      :caller_reference,
+      :comment,
+      :encryption_entities)
+      include Aws::Structure
+    end
+
+    # List of field-level encryption profiles.
+    #
+    # @!attribute [rw] next_marker
+    #   If there are more elements to be listed, this element is present and
+    #   contains the value that you can use for the `Marker` request
+    #   parameter to continue listing your profiles where you left off.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of field-level encryption profiles you want in
+    #   the response body.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] quantity
+    #   The number of field-level encryption profiles.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] items
+    #   The field-level encryption profile items.
+    #   @return [Array<Types::FieldLevelEncryptionProfileSummary>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/FieldLevelEncryptionProfileList AWS API Documentation
+    #
+    class FieldLevelEncryptionProfileList < Struct.new(
+      :next_marker,
+      :max_items,
+      :quantity,
+      :items)
+      include Aws::Structure
+    end
+
+    # The field-level encryption profile summary.
+    #
+    # @!attribute [rw] id
+    #   ID for the field-level encryption profile summary.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_modified_time
+    #   The time when the the field-level encryption profile summary was
+    #   last updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] name
+    #   Name for the field-level encryption profile summary.
+    #   @return [String]
+    #
+    # @!attribute [rw] encryption_entities
+    #   A complex data type of encryption entities for the field-level
+    #   encryption profile that include the public key ID, provider, and
+    #   field patterns for specifying which fields to encrypt with this key.
+    #   @return [Types::EncryptionEntities]
+    #
+    # @!attribute [rw] comment
+    #   An optional comment for the field-level encryption profile summary.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/FieldLevelEncryptionProfileSummary AWS API Documentation
+    #
+    class FieldLevelEncryptionProfileSummary < Struct.new(
+      :id,
+      :last_modified_time,
+      :name,
+      :encryption_entities,
+      :comment)
+      include Aws::Structure
+    end
+
+    # A summary of a field-level encryption item.
+    #
+    # @!attribute [rw] id
+    #   The unique ID of a field-level encryption item.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_modified_time
+    #   The last time that the summary of field-level encryption items was
+    #   modified.
+    #   @return [Time]
+    #
+    # @!attribute [rw] comment
+    #   An optional comment about the field-level encryption item.
+    #   @return [String]
+    #
+    # @!attribute [rw] query_arg_profile_config
+    #   A summary of a query argument-profile mapping.
+    #   @return [Types::QueryArgProfileConfig]
+    #
+    # @!attribute [rw] content_type_profile_config
+    #   A summary of a content type-profile mapping.
+    #   @return [Types::ContentTypeProfileConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/FieldLevelEncryptionSummary AWS API Documentation
+    #
+    class FieldLevelEncryptionSummary < Struct.new(
+      :id,
+      :last_modified_time,
+      :comment,
+      :query_arg_profile_config,
+      :content_type_profile_config)
+      include Aws::Structure
+    end
+
+    # A complex data type that includes the field patterns to match for
+    # field-level encryption.
+    #
+    # @note When making an API call, you may pass FieldPatterns
+    #   data as a hash:
+    #
+    #       {
+    #         quantity: 1, # required
+    #         items: ["string"],
+    #       }
+    #
+    # @!attribute [rw] quantity
+    #   The number of field-level encryption field patterns.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] items
+    #   An array of the field-level encryption field patterns.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/FieldPatterns AWS API Documentation
+    #
+    class FieldPatterns < Struct.new(
+      :quantity,
+      :items)
+      include Aws::Structure
+    end
+
+    # A complex type that specifies how CloudFront handles query strings and
+    # cookies.
+    #
+    # @note When making an API call, you may pass ForwardedValues
+    #   data as a hash:
+    #
+    #       {
+    #         query_string: false, # required
+    #         cookies: { # required
+    #           forward: "none", # required, accepts none, whitelist, all
+    #           whitelisted_names: {
+    #             quantity: 1, # required
+    #             items: ["string"],
+    #           },
+    #         },
+    #         headers: {
+    #           quantity: 1, # required
+    #           items: ["string"],
+    #         },
+    #         query_string_cache_keys: {
+    #           quantity: 1, # required
+    #           items: ["string"],
+    #         },
+    #       }
+    #
+    # @!attribute [rw] query_string
+    #   Indicates whether you want CloudFront to forward query strings to
+    #   the origin that is associated with this cache behavior and cache
+    #   based on the query string parameters. CloudFront behavior depends on
+    #   the value of `QueryString` and on the values that you specify for
+    #   `QueryStringCacheKeys`, if any:
+    #
+    #   If you specify true for `QueryString` and you don't specify any
+    #   values for `QueryStringCacheKeys`, CloudFront forwards all query
     #   string parameters to the origin and caches based on all query string
     #   parameters. Depending on how many query string parameters and values
     #   you have, this can adversely affect performance because CloudFront
@@ -3327,7 +4117,7 @@ module Aws::CloudFront
     #   cache behavior.
     #   @return [Types::QueryStringCacheKeys]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ForwardedValues AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ForwardedValues AWS API Documentation
     #
     class ForwardedValues < Struct.new(
       :query_string,
@@ -3386,7 +4176,7 @@ module Aws::CloudFront
     #   the CloudFront console, which includes both country names and codes.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GeoRestriction AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GeoRestriction AWS API Documentation
     #
     class GeoRestriction < Struct.new(
       :restriction_type,
@@ -3409,7 +4199,7 @@ module Aws::CloudFront
     #   The identity's ID.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetCloudFrontOriginAccessIdentityConfigRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetCloudFrontOriginAccessIdentityConfigRequest AWS API Documentation
     #
     class GetCloudFrontOriginAccessIdentityConfigRequest < Struct.new(
       :id)
@@ -3427,7 +4217,7 @@ module Aws::CloudFront
     #   `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetCloudFrontOriginAccessIdentityConfigResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetCloudFrontOriginAccessIdentityConfigResult AWS API Documentation
     #
     class GetCloudFrontOriginAccessIdentityConfigResult < Struct.new(
       :cloud_front_origin_access_identity_config,
@@ -3448,7 +4238,7 @@ module Aws::CloudFront
     #   The identity's ID.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetCloudFrontOriginAccessIdentityRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetCloudFrontOriginAccessIdentityRequest AWS API Documentation
     #
     class GetCloudFrontOriginAccessIdentityRequest < Struct.new(
       :id)
@@ -3466,7 +4256,7 @@ module Aws::CloudFront
     #   For example: `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetCloudFrontOriginAccessIdentityResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetCloudFrontOriginAccessIdentityResult AWS API Documentation
     #
     class GetCloudFrontOriginAccessIdentityResult < Struct.new(
       :cloud_front_origin_access_identity,
@@ -3487,7 +4277,7 @@ module Aws::CloudFront
     #   The distribution's ID.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetDistributionConfigRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetDistributionConfigRequest AWS API Documentation
     #
     class GetDistributionConfigRequest < Struct.new(
       :id)
@@ -3505,7 +4295,7 @@ module Aws::CloudFront
     #   `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetDistributionConfigResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetDistributionConfigResult AWS API Documentation
     #
     class GetDistributionConfigResult < Struct.new(
       :distribution_config,
@@ -3526,7 +4316,7 @@ module Aws::CloudFront
     #   The distribution's ID.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetDistributionRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetDistributionRequest AWS API Documentation
     #
     class GetDistributionRequest < Struct.new(
       :id)
@@ -3544,7 +4334,7 @@ module Aws::CloudFront
     #   `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetDistributionResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetDistributionResult AWS API Documentation
     #
     class GetDistributionResult < Struct.new(
       :distribution,
@@ -3552,6 +4342,149 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass GetFieldLevelEncryptionConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         id: "string", # required
+    #       }
+    #
+    # @!attribute [rw] id
+    #   Request the ID for the field-level encryption configuration
+    #   information.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetFieldLevelEncryptionConfigRequest AWS API Documentation
+    #
+    class GetFieldLevelEncryptionConfigRequest < Struct.new(
+      :id)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] field_level_encryption_config
+    #   Return the field-level encryption configuration information.
+    #   @return [Types::FieldLevelEncryptionConfig]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the field level encryption configuration. For
+    #   example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetFieldLevelEncryptionConfigResult AWS API Documentation
+    #
+    class GetFieldLevelEncryptionConfigResult < Struct.new(
+      :field_level_encryption_config,
+      :etag)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass GetFieldLevelEncryptionProfileConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         id: "string", # required
+    #       }
+    #
+    # @!attribute [rw] id
+    #   Get the ID for the field-level encryption profile configuration
+    #   information.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetFieldLevelEncryptionProfileConfigRequest AWS API Documentation
+    #
+    class GetFieldLevelEncryptionProfileConfigRequest < Struct.new(
+      :id)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] field_level_encryption_profile_config
+    #   Return the field-level encryption profile configuration information.
+    #   @return [Types::FieldLevelEncryptionProfileConfig]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the field-level encryption profile
+    #   configuration result. For example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetFieldLevelEncryptionProfileConfigResult AWS API Documentation
+    #
+    class GetFieldLevelEncryptionProfileConfigResult < Struct.new(
+      :field_level_encryption_profile_config,
+      :etag)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass GetFieldLevelEncryptionProfileRequest
+    #   data as a hash:
+    #
+    #       {
+    #         id: "string", # required
+    #       }
+    #
+    # @!attribute [rw] id
+    #   Get the ID for the field-level encryption profile information.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetFieldLevelEncryptionProfileRequest AWS API Documentation
+    #
+    class GetFieldLevelEncryptionProfileRequest < Struct.new(
+      :id)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] field_level_encryption_profile
+    #   Return the field-level encryption profile information.
+    #   @return [Types::FieldLevelEncryptionProfile]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the field level encryption profile. For
+    #   example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetFieldLevelEncryptionProfileResult AWS API Documentation
+    #
+    class GetFieldLevelEncryptionProfileResult < Struct.new(
+      :field_level_encryption_profile,
+      :etag)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass GetFieldLevelEncryptionRequest
+    #   data as a hash:
+    #
+    #       {
+    #         id: "string", # required
+    #       }
+    #
+    # @!attribute [rw] id
+    #   Request the ID for the field-level encryption configuration
+    #   information.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetFieldLevelEncryptionRequest AWS API Documentation
+    #
+    class GetFieldLevelEncryptionRequest < Struct.new(
+      :id)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] field_level_encryption
+    #   Return the field-level encryption configuration information.
+    #   @return [Types::FieldLevelEncryption]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the field level encryption configuration. For
+    #   example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetFieldLevelEncryptionResult AWS API Documentation
+    #
+    class GetFieldLevelEncryptionResult < Struct.new(
+      :field_level_encryption,
+      :etag)
+      include Aws::Structure
+    end
+
     # The request to get an invalidation's information.
     #
     # @note When making an API call, you may pass GetInvalidationRequest
@@ -3571,7 +4504,7 @@ module Aws::CloudFront
     #   `IDFDVBD632BHDS5`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetInvalidationRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetInvalidationRequest AWS API Documentation
     #
     class GetInvalidationRequest < Struct.new(
       :distribution_id,
@@ -3590,13 +4523,83 @@ module Aws::CloudFront
     #   [1]: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/InvalidationDatatype.html
     #   @return [Types::Invalidation]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetInvalidationResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetInvalidationResult AWS API Documentation
     #
     class GetInvalidationResult < Struct.new(
       :invalidation)
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass GetPublicKeyConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         id: "string", # required
+    #       }
+    #
+    # @!attribute [rw] id
+    #   Request the ID for the public key configuration.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetPublicKeyConfigRequest AWS API Documentation
+    #
+    class GetPublicKeyConfigRequest < Struct.new(
+      :id)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] public_key_config
+    #   Return the result for the public key configuration.
+    #   @return [Types::PublicKeyConfig]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the public key configuration. For example:
+    #   `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetPublicKeyConfigResult AWS API Documentation
+    #
+    class GetPublicKeyConfigResult < Struct.new(
+      :public_key_config,
+      :etag)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass GetPublicKeyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         id: "string", # required
+    #       }
+    #
+    # @!attribute [rw] id
+    #   Request the ID for the public key.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetPublicKeyRequest AWS API Documentation
+    #
+    class GetPublicKeyRequest < Struct.new(
+      :id)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] public_key
+    #   Return the public key.
+    #   @return [Types::PublicKey]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the public key. For example:
+    #   `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetPublicKeyResult AWS API Documentation
+    #
+    class GetPublicKeyResult < Struct.new(
+      :public_key,
+      :etag)
+      include Aws::Structure
+    end
+
     # To request to get a streaming distribution configuration.
     #
     # @note When making an API call, you may pass GetStreamingDistributionConfigRequest
@@ -3610,7 +4613,7 @@ module Aws::CloudFront
     #   The streaming distribution's ID.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetStreamingDistributionConfigRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetStreamingDistributionConfigRequest AWS API Documentation
     #
     class GetStreamingDistributionConfigRequest < Struct.new(
       :id)
@@ -3628,7 +4631,7 @@ module Aws::CloudFront
     #   `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetStreamingDistributionConfigResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetStreamingDistributionConfigResult AWS API Documentation
     #
     class GetStreamingDistributionConfigResult < Struct.new(
       :streaming_distribution_config,
@@ -3649,7 +4652,7 @@ module Aws::CloudFront
     #   The streaming distribution's ID.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetStreamingDistributionRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetStreamingDistributionRequest AWS API Documentation
     #
     class GetStreamingDistributionRequest < Struct.new(
       :id)
@@ -3667,7 +4670,7 @@ module Aws::CloudFront
     #   For example: `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/GetStreamingDistributionResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/GetStreamingDistributionResult AWS API Documentation
     #
     class GetStreamingDistributionResult < Struct.new(
       :streaming_distribution,
@@ -3744,7 +4747,7 @@ module Aws::CloudFront
     #   `Quantity` is `0`, omit `Items`.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Headers AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Headers AWS API Documentation
     #
     class Headers < Struct.new(
       :quantity,
@@ -3772,7 +4775,7 @@ module Aws::CloudFront
     #   The current invalidation information for the batch request.
     #   @return [Types::InvalidationBatch]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Invalidation AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Invalidation AWS API Documentation
     #
     class Invalidation < Struct.new(
       :id,
@@ -3827,7 +4830,7 @@ module Aws::CloudFront
     #   `InvalidationBatchAlreadyExists` error.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/InvalidationBatch AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/InvalidationBatch AWS API Documentation
     #
     class InvalidationBatch < Struct.new(
       :paths,
@@ -3875,7 +4878,7 @@ module Aws::CloudFront
     #   each invalidation batch created by the current AWS account.
     #   @return [Array<Types::InvalidationSummary>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/InvalidationList AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/InvalidationList AWS API Documentation
     #
     class InvalidationList < Struct.new(
       :marker,
@@ -3900,7 +4903,7 @@ module Aws::CloudFront
     #   The status of an invalidation request.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/InvalidationSummary AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/InvalidationSummary AWS API Documentation
     #
     class InvalidationSummary < Struct.new(
       :id,
@@ -3927,7 +4930,7 @@ module Aws::CloudFront
     #   For more information, see ActiveTrustedSigners.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/KeyPairIds AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/KeyPairIds AWS API Documentation
     #
     class KeyPairIds < Struct.new(
       :quantity,
@@ -3941,8 +4944,8 @@ module Aws::CloudFront
     #   data as a hash:
     #
     #       {
-    #         lambda_function_arn: "string",
-    #         event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #         lambda_function_arn: "LambdaFunctionARN", # required
+    #         event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #       }
     #
     # @!attribute [rw] lambda_function_arn
@@ -3978,7 +4981,7 @@ module Aws::CloudFront
     #     (OK), the function doesn't execute.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/LambdaFunctionAssociation AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/LambdaFunctionAssociation AWS API Documentation
     #
     class LambdaFunctionAssociation < Struct.new(
       :lambda_function_arn,
@@ -4006,8 +5009,8 @@ module Aws::CloudFront
     #         quantity: 1, # required
     #         items: [
     #           {
-    #             lambda_function_arn: "string",
-    #             event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #             lambda_function_arn: "LambdaFunctionARN", # required
+    #             event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #           },
     #         ],
     #       }
@@ -4022,7 +5025,7 @@ module Aws::CloudFront
     #   `Quantity` is `0`, you can omit `Items`.
     #   @return [Array<Types::LambdaFunctionAssociation>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/LambdaFunctionAssociations AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/LambdaFunctionAssociations AWS API Documentation
     #
     class LambdaFunctionAssociations < Struct.new(
       :quantity,
@@ -4054,7 +5057,7 @@ module Aws::CloudFront
     #   response body.
     #   @return [Integer]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListCloudFrontOriginAccessIdentitiesRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListCloudFrontOriginAccessIdentitiesRequest AWS API Documentation
     #
     class ListCloudFrontOriginAccessIdentitiesRequest < Struct.new(
       :marker,
@@ -4068,7 +5071,7 @@ module Aws::CloudFront
     #   The `CloudFrontOriginAccessIdentityList` type.
     #   @return [Types::CloudFrontOriginAccessIdentityList]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListCloudFrontOriginAccessIdentitiesResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListCloudFrontOriginAccessIdentitiesResult AWS API Documentation
     #
     class ListCloudFrontOriginAccessIdentitiesResult < Struct.new(
       :cloud_front_origin_access_identity_list)
@@ -4109,7 +5112,7 @@ module Aws::CloudFront
     #   web ACL.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListDistributionsByWebACLIdRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListDistributionsByWebACLIdRequest AWS API Documentation
     #
     class ListDistributionsByWebACLIdRequest < Struct.new(
       :marker,
@@ -4125,7 +5128,7 @@ module Aws::CloudFront
     #   The `DistributionList` type.
     #   @return [Types::DistributionList]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListDistributionsByWebACLIdResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListDistributionsByWebACLIdResult AWS API Documentation
     #
     class ListDistributionsByWebACLIdResult < Struct.new(
       :distribution_list)
@@ -4155,7 +5158,7 @@ module Aws::CloudFront
     #   The maximum number of distributions you want in the response body.
     #   @return [Integer]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListDistributionsRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListDistributionsRequest AWS API Documentation
     #
     class ListDistributionsRequest < Struct.new(
       :marker,
@@ -4169,13 +5172,96 @@ module Aws::CloudFront
     #   The `DistributionList` type.
     #   @return [Types::DistributionList]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListDistributionsResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListDistributionsResult AWS API Documentation
     #
     class ListDistributionsResult < Struct.new(
       :distribution_list)
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass ListFieldLevelEncryptionConfigsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         marker: "string",
+    #         max_items: 1,
+    #       }
+    #
+    # @!attribute [rw] marker
+    #   Use this when paginating results to indicate where to begin in your
+    #   list of configurations. The results include configurations in the
+    #   list that occur after the marker. To get the next page of results,
+    #   set the `Marker` to the value of the `NextMarker` from the current
+    #   page's response (which is also the ID of the last configuration on
+    #   that page).
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of field-level encryption configurations you want
+    #   in the response body.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListFieldLevelEncryptionConfigsRequest AWS API Documentation
+    #
+    class ListFieldLevelEncryptionConfigsRequest < Struct.new(
+      :marker,
+      :max_items)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] field_level_encryption_list
+    #   Returns a list of all field-level encryption configurations that
+    #   have been created in CloudFront for this account.
+    #   @return [Types::FieldLevelEncryptionList]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListFieldLevelEncryptionConfigsResult AWS API Documentation
+    #
+    class ListFieldLevelEncryptionConfigsResult < Struct.new(
+      :field_level_encryption_list)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListFieldLevelEncryptionProfilesRequest
+    #   data as a hash:
+    #
+    #       {
+    #         marker: "string",
+    #         max_items: 1,
+    #       }
+    #
+    # @!attribute [rw] marker
+    #   Use this when paginating results to indicate where to begin in your
+    #   list of profiles. The results include profiles in the list that
+    #   occur after the marker. To get the next page of results, set the
+    #   `Marker` to the value of the `NextMarker` from the current page's
+    #   response (which is also the ID of the last profile on that page).
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of field-level encryption profiles you want in
+    #   the response body.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListFieldLevelEncryptionProfilesRequest AWS API Documentation
+    #
+    class ListFieldLevelEncryptionProfilesRequest < Struct.new(
+      :marker,
+      :max_items)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] field_level_encryption_profile_list
+    #   Returns a list of the field-level encryption profiles that have been
+    #   created in CloudFront for this account.
+    #   @return [Types::FieldLevelEncryptionProfileList]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListFieldLevelEncryptionProfilesResult AWS API Documentation
+    #
+    class ListFieldLevelEncryptionProfilesResult < Struct.new(
+      :field_level_encryption_profile_list)
+      include Aws::Structure
+    end
+
     # The request to list invalidations.
     #
     # @note When making an API call, you may pass ListInvalidationsRequest
@@ -4207,7 +5293,7 @@ module Aws::CloudFront
     #   response body.
     #   @return [Integer]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListInvalidationsRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListInvalidationsRequest AWS API Documentation
     #
     class ListInvalidationsRequest < Struct.new(
       :distribution_id,
@@ -4222,10 +5308,51 @@ module Aws::CloudFront
     #   Information about invalidation batches.
     #   @return [Types::InvalidationList]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListInvalidationsResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListInvalidationsResult AWS API Documentation
+    #
+    class ListInvalidationsResult < Struct.new(
+      :invalidation_list)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListPublicKeysRequest
+    #   data as a hash:
+    #
+    #       {
+    #         marker: "string",
+    #         max_items: 1,
+    #       }
+    #
+    # @!attribute [rw] marker
+    #   Use this when paginating results to indicate where to begin in your
+    #   list of public keys. The results include public keys in the list
+    #   that occur after the marker. To get the next page of results, set
+    #   the `Marker` to the value of the `NextMarker` from the current
+    #   page's response (which is also the ID of the last public key on
+    #   that page).
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of public keys you want in the response body.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListPublicKeysRequest AWS API Documentation
+    #
+    class ListPublicKeysRequest < Struct.new(
+      :marker,
+      :max_items)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] public_key_list
+    #   Returns a list of all public keys that have been added to CloudFront
+    #   for this account.
+    #   @return [Types::PublicKeyList]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListPublicKeysResult AWS API Documentation
     #
-    class ListInvalidationsResult < Struct.new(
-      :invalidation_list)
+    class ListPublicKeysResult < Struct.new(
+      :public_key_list)
       include Aws::Structure
     end
 
@@ -4247,7 +5374,7 @@ module Aws::CloudFront
     #   The value that you provided for the `MaxItems` request parameter.
     #   @return [Integer]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListStreamingDistributionsRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListStreamingDistributionsRequest AWS API Documentation
     #
     class ListStreamingDistributionsRequest < Struct.new(
       :marker,
@@ -4261,7 +5388,7 @@ module Aws::CloudFront
     #   The `StreamingDistributionList` type.
     #   @return [Types::StreamingDistributionList]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListStreamingDistributionsResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListStreamingDistributionsResult AWS API Documentation
     #
     class ListStreamingDistributionsResult < Struct.new(
       :streaming_distribution_list)
@@ -4281,7 +5408,7 @@ module Aws::CloudFront
     #   An ARN of a CloudFront resource.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListTagsForResourceRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListTagsForResourceRequest AWS API Documentation
     #
     class ListTagsForResourceRequest < Struct.new(
       :resource)
@@ -4294,7 +5421,7 @@ module Aws::CloudFront
     #   A complex type that contains zero or more `Tag` elements.
     #   @return [Types::Tags]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ListTagsForResourceResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ListTagsForResourceResult AWS API Documentation
     #
     class ListTagsForResourceResult < Struct.new(
       :tags)
@@ -4347,7 +5474,7 @@ module Aws::CloudFront
     #   element.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/LoggingConfig AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/LoggingConfig AWS API Documentation
     #
     class LoggingConfig < Struct.new(
       :enabled,
@@ -4492,7 +5619,7 @@ module Aws::CloudFront
     #   instead.
     #   @return [Types::CustomOriginConfig]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Origin AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Origin AWS API Documentation
     #
     class Origin < Struct.new(
       :id,
@@ -4531,7 +5658,7 @@ module Aws::CloudFront
     #   field.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/OriginCustomHeader AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/OriginCustomHeader AWS API Documentation
     #
     class OriginCustomHeader < Struct.new(
       :header_name,
@@ -4561,7 +5688,7 @@ module Aws::CloudFront
     #   distribution.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/OriginSslProtocols AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/OriginSslProtocols AWS API Documentation
     #
     class OriginSslProtocols < Struct.new(
       :quantity,
@@ -4617,7 +5744,7 @@ module Aws::CloudFront
     #   A complex type that contains origins for this distribution.
     #   @return [Array<Types::Origin>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Origins AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Origins AWS API Documentation
     #
     class Origins < Struct.new(
       :quantity,
@@ -4650,7 +5777,7 @@ module Aws::CloudFront
     #   invalidate.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Paths AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Paths AWS API Documentation
     #
     class Paths < Struct.new(
       :quantity,
@@ -4658,6 +5785,237 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # A complex data type of public keys you add to CloudFront to use with
+    # features like field-level encryption.
+    #
+    # @!attribute [rw] id
+    #   A unique ID assigned to a public key you've added to CloudFront.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_time
+    #   A time you added a public key to CloudFront.
+    #   @return [Time]
+    #
+    # @!attribute [rw] public_key_config
+    #   A complex data type for a public key you add to CloudFront to use
+    #   with features like field-level encryption.
+    #   @return [Types::PublicKeyConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/PublicKey AWS API Documentation
+    #
+    class PublicKey < Struct.new(
+      :id,
+      :created_time,
+      :public_key_config)
+      include Aws::Structure
+    end
+
+    # Information about a public key you add to CloudFront to use with
+    # features like field-level encryption.
+    #
+    # @note When making an API call, you may pass PublicKeyConfig
+    #   data as a hash:
+    #
+    #       {
+    #         caller_reference: "string", # required
+    #         name: "string", # required
+    #         encoded_key: "string", # required
+    #         comment: "string",
+    #       }
+    #
+    # @!attribute [rw] caller_reference
+    #   A unique number that ensures the request can't be replayed.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name for a public key you add to CloudFront to use with features
+    #   like field-level encryption.
+    #   @return [String]
+    #
+    # @!attribute [rw] encoded_key
+    #   The encoded public key that you want to add to CloudFront to use
+    #   with features like field-level encryption.
+    #   @return [String]
+    #
+    # @!attribute [rw] comment
+    #   An optional comment about a public key.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/PublicKeyConfig AWS API Documentation
+    #
+    class PublicKeyConfig < Struct.new(
+      :caller_reference,
+      :name,
+      :encoded_key,
+      :comment)
+      include Aws::Structure
+    end
+
+    # A list of public keys you've added to CloudFront to use with features
+    # like field-level encryption.
+    #
+    # @!attribute [rw] next_marker
+    #   If there are more elements to be listed, this element is present and
+    #   contains the value that you can use for the `Marker` request
+    #   parameter to continue listing your public keys where you left off.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of public keys you want in the response body.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] quantity
+    #   The number of public keys you added to CloudFront to use with
+    #   features like field-level encryption.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] items
+    #   An array of information about a public key you add to CloudFront to
+    #   use with features like field-level encryption.
+    #   @return [Array<Types::PublicKeySummary>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/PublicKeyList AWS API Documentation
+    #
+    class PublicKeyList < Struct.new(
+      :next_marker,
+      :max_items,
+      :quantity,
+      :items)
+      include Aws::Structure
+    end
+
+    # Public key information summary.
+    #
+    # @!attribute [rw] id
+    #   ID for public key information summary.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   Name for public key information summary.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_time
+    #   Creation time for public key information summary.
+    #   @return [Time]
+    #
+    # @!attribute [rw] encoded_key
+    #   Encoded key for public key information summary.
+    #   @return [String]
+    #
+    # @!attribute [rw] comment
+    #   Comment for public key information summary.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/PublicKeySummary AWS API Documentation
+    #
+    class PublicKeySummary < Struct.new(
+      :id,
+      :name,
+      :created_time,
+      :encoded_key,
+      :comment)
+      include Aws::Structure
+    end
+
+    # Query argument-profile mapping for field-level encryption.
+    #
+    # @note When making an API call, you may pass QueryArgProfile
+    #   data as a hash:
+    #
+    #       {
+    #         query_arg: "string", # required
+    #         profile_id: "string", # required
+    #       }
+    #
+    # @!attribute [rw] query_arg
+    #   Query argument for field-level encryption query argument-profile
+    #   mapping.
+    #   @return [String]
+    #
+    # @!attribute [rw] profile_id
+    #   ID of profile to use for field-level encryption query
+    #   argument-profile mapping
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/QueryArgProfile AWS API Documentation
+    #
+    class QueryArgProfile < Struct.new(
+      :query_arg,
+      :profile_id)
+      include Aws::Structure
+    end
+
+    # Configuration for query argument-profile mapping for field-level
+    # encryption.
+    #
+    # @note When making an API call, you may pass QueryArgProfileConfig
+    #   data as a hash:
+    #
+    #       {
+    #         forward_when_query_arg_profile_is_unknown: false, # required
+    #         query_arg_profiles: {
+    #           quantity: 1, # required
+    #           items: [
+    #             {
+    #               query_arg: "string", # required
+    #               profile_id: "string", # required
+    #             },
+    #           ],
+    #         },
+    #       }
+    #
+    # @!attribute [rw] forward_when_query_arg_profile_is_unknown
+    #   Flag to set if you want a request to be forwarded to the origin even
+    #   if the profile specified by the field-level encryption query
+    #   argument, fle-profile, is unknown.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] query_arg_profiles
+    #   Profiles specified for query argument-profile mapping for
+    #   field-level encryption.
+    #   @return [Types::QueryArgProfiles]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/QueryArgProfileConfig AWS API Documentation
+    #
+    class QueryArgProfileConfig < Struct.new(
+      :forward_when_query_arg_profile_is_unknown,
+      :query_arg_profiles)
+      include Aws::Structure
+    end
+
+    # Query argument-profile mapping for field-level encryption.
+    #
+    # @note When making an API call, you may pass QueryArgProfiles
+    #   data as a hash:
+    #
+    #       {
+    #         quantity: 1, # required
+    #         items: [
+    #           {
+    #             query_arg: "string", # required
+    #             profile_id: "string", # required
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] quantity
+    #   Number of profiles for query argument-profile mapping for
+    #   field-level encryption.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] items
+    #   Number of items for query argument-profile mapping for field-level
+    #   encryption.
+    #   @return [Array<Types::QueryArgProfile>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/QueryArgProfiles AWS API Documentation
+    #
+    class QueryArgProfiles < Struct.new(
+      :quantity,
+      :items)
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass QueryStringCacheKeys
     #   data as a hash:
     #
@@ -4677,7 +6035,7 @@ module Aws::CloudFront
     #   behavior. If `Quantity` is 0, you can omit `Items`.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/QueryStringCacheKeys AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/QueryStringCacheKeys AWS API Documentation
     #
     class QueryStringCacheKeys < Struct.new(
       :quantity,
@@ -4705,7 +6063,7 @@ module Aws::CloudFront
     #   `MaxMind` GeoIP databases.
     #   @return [Types::GeoRestriction]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Restrictions AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Restrictions AWS API Documentation
     #
     class Restrictions < Struct.new(
       :geo_restriction)
@@ -4754,7 +6112,7 @@ module Aws::CloudFront
     #   [1]: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/S3Origin AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/S3Origin AWS API Documentation
     #
     class S3Origin < Struct.new(
       :domain_name,
@@ -4805,7 +6163,7 @@ module Aws::CloudFront
     #   [1]: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/S3OriginConfig AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/S3OriginConfig AWS API Documentation
     #
     class S3OriginConfig < Struct.new(
       :origin_access_identity)
@@ -4830,7 +6188,7 @@ module Aws::CloudFront
     #   that are associated with `AwsAccountNumber`.
     #   @return [Types::KeyPairIds]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Signer AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Signer AWS API Documentation
     #
     class Signer < Struct.new(
       :aws_account_number,
@@ -4888,7 +6246,7 @@ module Aws::CloudFront
     #   The current configuration information for the RTMP distribution.
     #   @return [Types::StreamingDistributionConfig]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/StreamingDistribution AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/StreamingDistribution AWS API Documentation
     #
     class StreamingDistribution < Struct.new(
       :id,
@@ -4989,7 +6347,7 @@ module Aws::CloudFront
     #   requests for content.
     #   @return [Boolean]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/StreamingDistributionConfig AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/StreamingDistributionConfig AWS API Documentation
     #
     class StreamingDistributionConfig < Struct.new(
       :caller_reference,
@@ -5052,7 +6410,7 @@ module Aws::CloudFront
     #   A complex type that contains zero or more `Tag` elements.
     #   @return [Types::Tags]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/StreamingDistributionConfigWithTags AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/StreamingDistributionConfigWithTags AWS API Documentation
     #
     class StreamingDistributionConfigWithTags < Struct.new(
       :streaming_distribution_config,
@@ -5094,7 +6452,7 @@ module Aws::CloudFront
     #   account.
     #   @return [Array<Types::StreamingDistributionSummary>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/StreamingDistributionList AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/StreamingDistributionList AWS API Documentation
     #
     class StreamingDistributionList < Struct.new(
       :marker,
@@ -5173,7 +6531,7 @@ module Aws::CloudFront
     #   content.
     #   @return [Boolean]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/StreamingDistributionSummary AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/StreamingDistributionSummary AWS API Documentation
     #
     class StreamingDistributionSummary < Struct.new(
       :id,
@@ -5225,7 +6583,7 @@ module Aws::CloudFront
     #   in the `Logging` element.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/StreamingLoggingConfig AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/StreamingLoggingConfig AWS API Documentation
     #
     class StreamingLoggingConfig < Struct.new(
       :enabled,
@@ -5260,7 +6618,7 @@ module Aws::CloudFront
     #   characters `_ - . : / = + @`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Tag AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Tag AWS API Documentation
     #
     class Tag < Struct.new(
       :key,
@@ -5281,7 +6639,7 @@ module Aws::CloudFront
     #   A complex type that contains `Tag` key elements.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/TagKeys AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/TagKeys AWS API Documentation
     #
     class TagKeys < Struct.new(
       :items)
@@ -5313,7 +6671,7 @@ module Aws::CloudFront
     #   A complex type that contains zero or more `Tag` elements.
     #   @return [Types::Tags]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/TagResourceRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/TagResourceRequest AWS API Documentation
     #
     class TagResourceRequest < Struct.new(
       :resource,
@@ -5339,7 +6697,7 @@ module Aws::CloudFront
     #   A complex type that contains `Tag` elements.
     #   @return [Array<Types::Tag>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/Tags AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/Tags AWS API Documentation
     #
     class Tags < Struct.new(
       :items)
@@ -5395,7 +6753,7 @@ module Aws::CloudFront
     #   cache behavior. If `Quantity` is `0`, you can omit `Items`.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/TrustedSigners AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/TrustedSigners AWS API Documentation
     #
     class TrustedSigners < Struct.new(
       :enabled,
@@ -5424,7 +6782,7 @@ module Aws::CloudFront
     #   A complex type that contains zero or more `Tag` key elements.
     #   @return [Types::TagKeys]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/UntagResourceRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UntagResourceRequest AWS API Documentation
     #
     class UntagResourceRequest < Struct.new(
       :resource,
@@ -5459,7 +6817,7 @@ module Aws::CloudFront
     #   identity's configuration. For example: `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/UpdateCloudFrontOriginAccessIdentityRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdateCloudFrontOriginAccessIdentityRequest AWS API Documentation
     #
     class UpdateCloudFrontOriginAccessIdentityRequest < Struct.new(
       :cloud_front_origin_access_identity_config,
@@ -5479,7 +6837,7 @@ module Aws::CloudFront
     #   `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/UpdateCloudFrontOriginAccessIdentityResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdateCloudFrontOriginAccessIdentityResult AWS API Documentation
     #
     class UpdateCloudFrontOriginAccessIdentityResult < Struct.new(
       :cloud_front_origin_access_identity,
@@ -5576,11 +6934,12 @@ module Aws::CloudFront
     #               quantity: 1, # required
     #               items: [
     #                 {
-    #                   lambda_function_arn: "string",
-    #                   event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                   lambda_function_arn: "LambdaFunctionARN", # required
+    #                   event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #                 },
     #               ],
     #             },
+    #             field_level_encryption_id: "string",
     #           },
     #           cache_behaviors: {
     #             quantity: 1, # required
@@ -5629,11 +6988,12 @@ module Aws::CloudFront
     #                   quantity: 1, # required
     #                   items: [
     #                     {
-    #                       lambda_function_arn: "string",
-    #                       event_type: "viewer-request", # accepts viewer-request, viewer-response, origin-request, origin-response
+    #                       lambda_function_arn: "LambdaFunctionARN", # required
+    #                       event_type: "viewer-request", # required, accepts viewer-request, viewer-response, origin-request, origin-response
     #                     },
     #                   ],
     #                 },
+    #                 field_level_encryption_id: "string",
     #               },
     #             ],
     #           },
@@ -5694,7 +7054,7 @@ module Aws::CloudFront
     #   distribution's configuration. For example: `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/UpdateDistributionRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdateDistributionRequest AWS API Documentation
     #
     class UpdateDistributionRequest < Struct.new(
       :distribution_config,
@@ -5714,7 +7074,7 @@ module Aws::CloudFront
     #   `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/UpdateDistributionResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdateDistributionResult AWS API Documentation
     #
     class UpdateDistributionResult < Struct.new(
       :distribution,
@@ -5722,6 +7082,199 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass UpdateFieldLevelEncryptionConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         field_level_encryption_config: { # required
+    #           caller_reference: "string", # required
+    #           comment: "string",
+    #           query_arg_profile_config: {
+    #             forward_when_query_arg_profile_is_unknown: false, # required
+    #             query_arg_profiles: {
+    #               quantity: 1, # required
+    #               items: [
+    #                 {
+    #                   query_arg: "string", # required
+    #                   profile_id: "string", # required
+    #                 },
+    #               ],
+    #             },
+    #           },
+    #           content_type_profile_config: {
+    #             forward_when_content_type_is_unknown: false, # required
+    #             content_type_profiles: {
+    #               quantity: 1, # required
+    #               items: [
+    #                 {
+    #                   format: "URLEncoded", # required, accepts URLEncoded
+    #                   profile_id: "string",
+    #                   content_type: "string", # required
+    #                 },
+    #               ],
+    #             },
+    #           },
+    #         },
+    #         id: "string", # required
+    #         if_match: "string",
+    #       }
+    #
+    # @!attribute [rw] field_level_encryption_config
+    #   Request to update a field-level encryption configuration.
+    #   @return [Types::FieldLevelEncryptionConfig]
+    #
+    # @!attribute [rw] id
+    #   The ID of the configuration you want to update.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The value of the `ETag` header that you received when retrieving the
+    #   configuration identity to update. For example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdateFieldLevelEncryptionConfigRequest AWS API Documentation
+    #
+    class UpdateFieldLevelEncryptionConfigRequest < Struct.new(
+      :field_level_encryption_config,
+      :id,
+      :if_match)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] field_level_encryption
+    #   Return the results of updating the configuration.
+    #   @return [Types::FieldLevelEncryption]
+    #
+    # @!attribute [rw] etag
+    #   The value of the `ETag` header that you received when updating the
+    #   configuration. For example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdateFieldLevelEncryptionConfigResult AWS API Documentation
+    #
+    class UpdateFieldLevelEncryptionConfigResult < Struct.new(
+      :field_level_encryption,
+      :etag)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass UpdateFieldLevelEncryptionProfileRequest
+    #   data as a hash:
+    #
+    #       {
+    #         field_level_encryption_profile_config: { # required
+    #           name: "string", # required
+    #           caller_reference: "string", # required
+    #           comment: "string",
+    #           encryption_entities: { # required
+    #             quantity: 1, # required
+    #             items: [
+    #               {
+    #                 public_key_id: "string", # required
+    #                 provider_id: "string", # required
+    #                 field_patterns: { # required
+    #                   quantity: 1, # required
+    #                   items: ["string"],
+    #                 },
+    #               },
+    #             ],
+    #           },
+    #         },
+    #         id: "string", # required
+    #         if_match: "string",
+    #       }
+    #
+    # @!attribute [rw] field_level_encryption_profile_config
+    #   Request to update a field-level encryption profile.
+    #   @return [Types::FieldLevelEncryptionProfileConfig]
+    #
+    # @!attribute [rw] id
+    #   The ID of the field-level encryption profile request.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The value of the `ETag` header that you received when retrieving the
+    #   profile identity to update. For example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdateFieldLevelEncryptionProfileRequest AWS API Documentation
+    #
+    class UpdateFieldLevelEncryptionProfileRequest < Struct.new(
+      :field_level_encryption_profile_config,
+      :id,
+      :if_match)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] field_level_encryption_profile
+    #   Return the results of updating the profile.
+    #   @return [Types::FieldLevelEncryptionProfile]
+    #
+    # @!attribute [rw] etag
+    #   The result of the field-level encryption profile request.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdateFieldLevelEncryptionProfileResult AWS API Documentation
+    #
+    class UpdateFieldLevelEncryptionProfileResult < Struct.new(
+      :field_level_encryption_profile,
+      :etag)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass UpdatePublicKeyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         public_key_config: { # required
+    #           caller_reference: "string", # required
+    #           name: "string", # required
+    #           encoded_key: "string", # required
+    #           comment: "string",
+    #         },
+    #         id: "string", # required
+    #         if_match: "string",
+    #       }
+    #
+    # @!attribute [rw] public_key_config
+    #   Request to update public key information.
+    #   @return [Types::PublicKeyConfig]
+    #
+    # @!attribute [rw] id
+    #   ID of the public key to be updated.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The value of the `ETag` header that you received when retrieving the
+    #   public key to update. For example: `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdatePublicKeyRequest AWS API Documentation
+    #
+    class UpdatePublicKeyRequest < Struct.new(
+      :public_key_config,
+      :id,
+      :if_match)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] public_key
+    #   Return the results of updating the public key.
+    #   @return [Types::PublicKey]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the update public key result. For example:
+    #   `E2QWRUHAPOMQZL`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdatePublicKeyResult AWS API Documentation
+    #
+    class UpdatePublicKeyResult < Struct.new(
+      :public_key,
+      :etag)
+      include Aws::Structure
+    end
+
     # The request to update a streaming distribution.
     #
     # @note When making an API call, you may pass UpdateStreamingDistributionRequest
@@ -5770,7 +7323,7 @@ module Aws::CloudFront
     #   `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/UpdateStreamingDistributionRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdateStreamingDistributionRequest AWS API Documentation
     #
     class UpdateStreamingDistributionRequest < Struct.new(
       :streaming_distribution_config,
@@ -5790,7 +7343,7 @@ module Aws::CloudFront
     #   `E2QWRUHAPOMQZL`.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/UpdateStreamingDistributionResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/UpdateStreamingDistributionResult AWS API Documentation
     #
     class UpdateStreamingDistributionResult < Struct.new(
       :streaming_distribution,
@@ -6028,7 +7581,7 @@ module Aws::CloudFront
     #   * ViewerCertificate$CloudFrontDefaultCertificate
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-03-25/ViewerCertificate AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2017-10-30/ViewerCertificate AWS API Documentation
     #
     class ViewerCertificate < Struct.new(
       :cloud_front_default_certificate,