1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. cloudfront
  5. TrustStore

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.40.0 published on Thursday, Dec 11, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.cloudfront.TrustStore

aws-native logo

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.40.0 published on Thursday, Dec 11, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Resource Type definition for AWS::CloudFront::TrustStore. TrustStores contain CA certificates for mTLS authentication and can be associated with CloudFront distributions.

    Create TrustStore Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new TrustStore(name: string, args?: TrustStoreArgs, opts?: CustomResourceOptions);
    @overload
def TrustStore(resource_name: str,
               args: Optional[TrustStoreArgs] = None,
               opts: Optional[ResourceOptions] = None)

@overload
def TrustStore(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               ca_certificates_bundle_source: Optional[TrustStoreCaCertificatesBundleSourceArgs] = None,
               name: Optional[str] = None,
               tags: Optional[Sequence[_root_inputs.TagArgs]] = None)
    func NewTrustStore(ctx *Context, name string, args *TrustStoreArgs, opts ...ResourceOption) (*TrustStore, error)
    public TrustStore(string name, TrustStoreArgs? args = null, CustomResourceOptions? opts = null)
    public TrustStore(String name, TrustStoreArgs args)
public TrustStore(String name, TrustStoreArgs args, CustomResourceOptions options)

    type: aws-native:cloudfront:TrustStore
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args TrustStoreArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args TrustStoreArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args TrustStoreArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args TrustStoreArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args TrustStoreArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    TrustStore Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The TrustStore resource accepts the following input properties:

    CaCertificatesBundleSource Pulumi.AwsNative.CloudFront.Inputs.TrustStoreCaCertificatesBundleSource
    A CA certificates bundle source.
    Name string
    A unique name to identify the trust store
    Tags List<Pulumi.AwsNative.Inputs.Tag>
    Key-value pairs for resource tagging
    CaCertificatesBundleSource TrustStoreCaCertificatesBundleSourceArgs
    A CA certificates bundle source.
    Name string
    A unique name to identify the trust store
    Tags TagArgs
    Key-value pairs for resource tagging
    caCertificatesBundleSource TrustStoreCaCertificatesBundleSource
    A CA certificates bundle source.
    name String
    A unique name to identify the trust store
    tags List<Tag>
    Key-value pairs for resource tagging
    caCertificatesBundleSource TrustStoreCaCertificatesBundleSource
    A CA certificates bundle source.
    name string
    A unique name to identify the trust store
    tags Tag[]
    Key-value pairs for resource tagging
    ca_certificates_bundle_source TrustStoreCaCertificatesBundleSourceArgs
    A CA certificates bundle source.
    name str
    A unique name to identify the trust store
    tags Sequence[TagArgs]
    Key-value pairs for resource tagging
    caCertificatesBundleSource Property Map
    A CA certificates bundle source.
    name String
    A unique name to identify the trust store
    tags List<Property Map>
    Key-value pairs for resource tagging

    Outputs

    All input properties are implicitly available as output properties. Additionally, the TrustStore resource produces the following output properties:

    Arn string
    The Amazon Resource Name (ARN) of the trust store
    AwsId string
    The unique identifier for the trust store
    ETag string
    The version identifier for the current version of the trust store.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastModifiedTime string
    The last modification timestamp of the trust store PEM file
    NumberOfCaCertificates int
    The number of CA certificates in the trust store PEM file
    Status Pulumi.AwsNative.CloudFront.TrustStoreStatus
    Current status of the trust store
    Arn string
    The Amazon Resource Name (ARN) of the trust store
    AwsId string
    The unique identifier for the trust store
    ETag string
    The version identifier for the current version of the trust store.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastModifiedTime string
    The last modification timestamp of the trust store PEM file
    NumberOfCaCertificates int
    The number of CA certificates in the trust store PEM file
    Status TrustStoreStatus
    Current status of the trust store
    arn String
    The Amazon Resource Name (ARN) of the trust store
    awsId String
    The unique identifier for the trust store
    eTag String
    The version identifier for the current version of the trust store.
    id String
    The provider-assigned unique ID for this managed resource.
    lastModifiedTime String
    The last modification timestamp of the trust store PEM file
    numberOfCaCertificates Integer
    The number of CA certificates in the trust store PEM file
    status TrustStoreStatus
    Current status of the trust store
    arn string
    The Amazon Resource Name (ARN) of the trust store
    awsId string
    The unique identifier for the trust store
    eTag string
    The version identifier for the current version of the trust store.
    id string
    The provider-assigned unique ID for this managed resource.
    lastModifiedTime string
    The last modification timestamp of the trust store PEM file
    numberOfCaCertificates number
    The number of CA certificates in the trust store PEM file
    status TrustStoreStatus
    Current status of the trust store
    arn str
    The Amazon Resource Name (ARN) of the trust store
    aws_id str
    The unique identifier for the trust store
    e_tag str
    The version identifier for the current version of the trust store.
    id str
    The provider-assigned unique ID for this managed resource.
    last_modified_time str
    The last modification timestamp of the trust store PEM file
    number_of_ca_certificates int
    The number of CA certificates in the trust store PEM file
    status TrustStoreStatus
    Current status of the trust store
    arn String
    The Amazon Resource Name (ARN) of the trust store
    awsId String
    The unique identifier for the trust store
    eTag String
    The version identifier for the current version of the trust store.
    id String
    The provider-assigned unique ID for this managed resource.
    lastModifiedTime String
    The last modification timestamp of the trust store PEM file
    numberOfCaCertificates Number
    The number of CA certificates in the trust store PEM file
    status "PENDING" | "ACTIVE" | "FAILED"
    Current status of the trust store

    Supporting Types

    Tag, TagArgs

    A set of tags to apply to the resource.
    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    TrustStoreCaCertificatesBundleS3Location, TrustStoreCaCertificatesBundleS3LocationArgs

    Bucket string
    The S3 bucket containing the CA certificates bundle PEM file
    Key string
    The S3 object key of the CA certificates bundle PEM file
    Region string
    The S3 bucket region
    Version string
    The S3 object version of the CA certificates bundle PEM file
    Bucket string
    The S3 bucket containing the CA certificates bundle PEM file
    Key string
    The S3 object key of the CA certificates bundle PEM file
    Region string
    The S3 bucket region
    Version string
    The S3 object version of the CA certificates bundle PEM file
    bucket String
    The S3 bucket containing the CA certificates bundle PEM file
    key String
    The S3 object key of the CA certificates bundle PEM file
    region String
    The S3 bucket region
    version String
    The S3 object version of the CA certificates bundle PEM file
    bucket string
    The S3 bucket containing the CA certificates bundle PEM file
    key string
    The S3 object key of the CA certificates bundle PEM file
    region string
    The S3 bucket region
    version string
    The S3 object version of the CA certificates bundle PEM file
    bucket str
    The S3 bucket containing the CA certificates bundle PEM file
    key str
    The S3 object key of the CA certificates bundle PEM file
    region str
    The S3 bucket region
    version str
    The S3 object version of the CA certificates bundle PEM file
    bucket String
    The S3 bucket containing the CA certificates bundle PEM file
    key String
    The S3 object key of the CA certificates bundle PEM file
    region String
    The S3 bucket region
    version String
    The S3 object version of the CA certificates bundle PEM file

    TrustStoreCaCertificatesBundleSource, TrustStoreCaCertificatesBundleSourceArgs

    CaCertificatesBundleS3Location TrustStoreCaCertificatesBundleS3Location
    The CA certificates bundle location in Amazon S3.
    caCertificatesBundleS3Location TrustStoreCaCertificatesBundleS3Location
    The CA certificates bundle location in Amazon S3.
    caCertificatesBundleS3Location TrustStoreCaCertificatesBundleS3Location
    The CA certificates bundle location in Amazon S3.
    ca_certificates_bundle_s3_location TrustStoreCaCertificatesBundleS3Location
    The CA certificates bundle location in Amazon S3.
    caCertificatesBundleS3Location Property Map
    The CA certificates bundle location in Amazon S3.

    TrustStoreStatus, TrustStoreStatusArgs

    Pending
    PENDING
    Active
    ACTIVE
    Failed
    FAILED
    TrustStoreStatusPending
    PENDING
    TrustStoreStatusActive
    ACTIVE
    TrustStoreStatusFailed
    FAILED
    Pending
    PENDING
    Active
    ACTIVE
    Failed
    FAILED
    Pending
    PENDING
    Active
    ACTIVE
    Failed
    FAILED
    PENDING
    PENDING
    ACTIVE
    ACTIVE
    FAILED
    FAILED
    "PENDING"
    PENDING
    "ACTIVE"
    ACTIVE
    "FAILED"
    FAILED

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    AWS Cloud Control v1.40.0 published on Thursday, Dec 11, 2025 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native
      Meet Neo: Your AI Platform Teammate