AwsCloudfrontViewerMtlsConfigArgs

interface AwsCloudfrontViewerMtlsConfigArgs { advertiseTrustStoreCaNames?: Input<boolean>; trustStoreId: Input<string>; }

Required viewer mTLS configuration.

Remarks

The component always requires client authentication and validates certificate expiry.

Example

CODE
`const viewerMtlsConfig: AwsCloudfrontViewerMtlsConfigArgs = { trustStoreId: 'trust-store-id' };`

Properties

advertiseTrustStoreCaNames: Input<boolean>

Whether to advertise trust-store CA names to clients.

Default: `false`

trustStoreId: Input<string>

CloudFront trust-store identifier used to validate viewer certificates.