Skip to content

Api Gateway  >  Structures  >  MutualTlsAuthenticationInput

MutualTlsAuthenticationInput

Structure Class

MutualTlsAuthenticationInput dataclass

The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.

Attributes

truststore_uri class-attribute instance-attribute
truststore_uri: str | None = None

An Amazon S3 URL that specifies the truststore for mutual TLS authentication, for example s3://bucket-name/key-name. The truststore can contain certificates from public or private certificate authorities. To update the truststore, upload a new version to S3, and then update your custom domain name to use the new version. To update the truststore, you must have permissions to access the S3 object.

truststore_version class-attribute instance-attribute
truststore_version: str | None = None

The version of the S3 object that contains your truststore. To specify a version, you must have versioning enabled for the S3 bucket