# MTLSConfig

The mTLS authentication configuration for a custom domain name.

- Source: [`aws-apigateway/lib/domain-name.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-apigateway/lib/domain-name.ts#L511)

## Example

```ts
declare const acm: any;

new apigateway.DomainName(this, 'domain-name', {
  domainName: 'example.com',
  certificate: acm.Certificate.fromCertificateArn(this, 'cert', 'arn:aws:acm:us-east-1:1111111:certificate/11-3336f1-44483d-adc7-9cd375c5169d'),
  mtls: {
    bucket: new s3.Bucket(this, 'bucket'),
    key: 'truststore.pem',
    version: 'version',
  },
});
```

## Properties

- `bucket`: [IBucket](/cdk/api/v2/docs/aws-cdk-lib.aws_s3.IBucket.html) (required) — The bucket that the trust store is hosted in.

- `key`: string (required) — The key in S3 to look at for the trust store.

- `version`: string — The version of the S3 object that contains your truststore.

  **Default:** latest version

  To specify a version, you must have versioning enabled for the S3 bucket.