# CfnTrustStoreProps

Properties for defining a `CfnTrustStore`.

Extends: CfnTrustStoreProps
Used as props by: CfnTrustStore

- Source: Generated code
- Type last changed: v2.254.0 · 13 May 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_cloudfront as cloudfront } from 'aws-cdk-lib';
const cfnTrustStoreProps: cloudfront.CfnTrustStoreProps = {
  name: 'name',

  // the properties below are optional
  caCertificatesBundleSource: {
    caCertificatesBundleS3Location: {
      bucket: 'bucket',
      key: 'key',
      region: 'region',

      // the properties below are optional
      version: 'version',
    },
  },
  tags: [{
    key: 'key',
    value: 'value',
  }],
  useClientCertificateOcspEndpoint: false,
};
```

## Properties

- `caCertificatesBundleSource`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnTrustStore.CaCertificatesBundleSourceProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_cloudfront.CfnTrustStore.CaCertificatesBundleSourceProperty.html) — A CA certificates bundle source.

- `name`: string (required) — The trust store's name.

- `tags`: [CfnTag](/cdk/api/v2/docs/aws-cdk-lib.CfnTag.html)[] — A complex type that contains zero or more `Tag` elements.

- `useClientCertificateOcspEndpoint`: boolean | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) — A boolean.

  When true, performs real-time certificate revocation checks by querying the OCSP endpoint specified within the client certificate.