TrustStore

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const test = new aws.lb.TrustStore("test", {
    name: "tf-example-lb-ts",
    caCertificatesBundleS3Bucket: "...",
    caCertificatesBundleS3Key: "...",
});
const example = new aws.lb.Listener("example", {
    loadBalancerArn: exampleAwsLb.id,
    defaultActions: [{
        targetGroupArn: exampleAwsLbTargetGroup.id,
        type: "forward",
    }],
    mutualAuthentication: {
        mode: "verify",
        trustStoreArn: test.arn,
    },
});

import pulumi
import pulumi_aws as aws
test = aws.lb.TrustStore("test",
    name="tf-example-lb-ts",
    ca_certificates_bundle_s3_bucket="...",
    ca_certificates_bundle_s3_key="...")
example = aws.lb.Listener("example",
    load_balancer_arn=example_aws_lb["id"],
    default_actions=[{
        "target_group_arn": example_aws_lb_target_group["id"],
        "type": "forward",
    }],
    mutual_authentication={
        "mode": "verify",
        "trust_store_arn": test.arn,
    })

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
    var test = new Aws.LB.TrustStore("test", new()
    {
        Name = "tf-example-lb-ts",
        CaCertificatesBundleS3Bucket = "...",
        CaCertificatesBundleS3Key = "...",
    });
    var example = new Aws.LB.Listener("example", new()
    {
        LoadBalancerArn = exampleAwsLb.Id,
        DefaultActions = new[]
        {
            new Aws.LB.Inputs.ListenerDefaultActionArgs
            {
                TargetGroupArn = exampleAwsLbTargetGroup.Id,
                Type = "forward",
            },
        },
        MutualAuthentication = new Aws.LB.Inputs.ListenerMutualAuthenticationArgs
        {
            Mode = "verify",
            TrustStoreArn = test.Arn,
        },
    });
});

package main
import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/lb"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		test, err := lb.NewTrustStore(ctx, "test", &lb.TrustStoreArgs{
			Name:                         pulumi.String("tf-example-lb-ts"),
			CaCertificatesBundleS3Bucket: pulumi.String("..."),
			CaCertificatesBundleS3Key:    pulumi.String("..."),
		})
		if err != nil {
			return err
		}
		_, err = lb.NewListener(ctx, "example", &lb.ListenerArgs{
			LoadBalancerArn: pulumi.Any(exampleAwsLb.Id),
			DefaultActions: lb.ListenerDefaultActionArray{
				&lb.ListenerDefaultActionArgs{
					TargetGroupArn: pulumi.Any(exampleAwsLbTargetGroup.Id),
					Type:           pulumi.String("forward"),
				},
			},
			MutualAuthentication: &lb.ListenerMutualAuthenticationArgs{
				Mode:          pulumi.String("verify"),
				TrustStoreArn: test.Arn,
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.lb.TrustStore;
import com.pulumi.aws.lb.TrustStoreArgs;
import com.pulumi.aws.lb.Listener;
import com.pulumi.aws.lb.ListenerArgs;
import com.pulumi.aws.lb.inputs.ListenerDefaultActionArgs;
import com.pulumi.aws.lb.inputs.ListenerMutualAuthenticationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var test = new TrustStore("test", TrustStoreArgs.builder()
            .name("tf-example-lb-ts")
            .caCertificatesBundleS3Bucket("...")
            .caCertificatesBundleS3Key("...")
            .build());
        var example = new Listener("example", ListenerArgs.builder()
            .loadBalancerArn(exampleAwsLb.id())
            .defaultActions(ListenerDefaultActionArgs.builder()
                .targetGroupArn(exampleAwsLbTargetGroup.id())
                .type("forward")
                .build())
            .mutualAuthentication(ListenerMutualAuthenticationArgs.builder()
                .mode("verify")
                .trustStoreArn(test.arn())
                .build())
            .build());
    }
}

resources:
  test:
    type: aws:lb:TrustStore
    properties:
      name: tf-example-lb-ts
      caCertificatesBundleS3Bucket: '...'
      caCertificatesBundleS3Key: '...'
  example:
    type: aws:lb:Listener
    properties:
      loadBalancerArn: ${exampleAwsLb.id}
      defaultActions:
        - targetGroupArn: ${exampleAwsLbTargetGroup.id}
          type: forward
      mutualAuthentication:
        mode: verify
        trustStoreArn: ${test.arn}

$ pulumi import aws:lb/trustStore:TrustStore example arn:aws:elasticloadbalancing:us-west-2:187416307283:truststore/my-trust-store/20cfe21448b66314