AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-08-22 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.md

Summary

Added mutual TLS authentication configuration example

Security assessment

The new example demonstrates how to configure mutual TLS authentication (mTLS), which enhances security by enabling client certificate verification. This adds documentation for a security feature.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.md
index 651bf1d22..42cf74f7d 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-elasticloadbalancingv2-listener-mutualauthentication.md
@@ -3 +3 @@
-SyntaxProperties
+SyntaxPropertiesExamples
@@ -82,0 +83,63 @@ _Required_ : No
+## Examples
+
+### 
+
+The following example configures mutual TLS verify mode.
+
+#### YAML
+    
+    
+    myHTTPSListener:
+      Type: 'AWS::ElasticLoadBalancingV2::Listener'
+      Properties: 
+        LoadBalancerArn: !Ref myLoadBalancer
+        Protocol: HTTPS
+        Port: 443
+        DefaultActions:
+          - Type: forward
+            TargetGroupArn: !Ref myTargetGroup
+        SslPolicy: "ELBSecurityPolicy-TLS13-1-2-2021-06"
+        Certificates: 
+          - CertificateArn: "arn:aws:acm:us-west-2:123456789012:certificate/88ca7932-756c-46f1-a70d-03fa7EXAMPLE"
+        MutualAuthentication:
+          - Mode: verify
+            TrustStoreArn: !Ref myTrustStore
+
+#### JSON
+    
+    
+    {
+        "myHTTPSListener": {
+            "Type": "AWS::ElasticLoadBalancingV2::Listener",
+            "Properties": {
+                "LoadBalancerArn": {
+                    "Ref": "myLoadBalancer"
+                },
+                "Protocol": "HTTPS",
+                "Port": 443,
+                "DefaultActions": [
+                    {
+                        "Type": "forward",
+                        "TargetGroupArn": {
+                            "Ref": "myTargetGroup"
+                        }
+                    }
+                ],
+                "SslPolicy": "ELBSecurityPolicy-TLS13-1-2-2021-06",
+                "Certificates": [
+                    {
+                        "CertificateArn": "arn:aws:acm:us-west-2:123456789012:certificate/88ca7932-756c-46f1-a70d-03fa7EXAMPLE"
+                    }
+                ],
+                "MutualAuthentication": [
+                    {
+                        "Mode": "verify",
+                        "TrustStoreArn": {
+                            "Ref": "myTrustStore"
+                        }
+                    }
+                ]
+            }
+        }
+    }
+