AWS cli documentation change

Service: cli · 2026-05-16 · Documentation medium

File: cli/latest/reference/cloudfront/create-trust-store.md

Summary

Added --use-client-certificate-ocsp-endpoint option for certificate revocation checks

Security assessment

Introduces OCSP certificate revocation checking capability, enhancing security documentation without evidence of patching a specific vulnerability.

Diff

diff --git a/cli/latest/reference/cloudfront/create-trust-store.md b/cli/latest/reference/cloudfront/create-trust-store.md
index e412b22b3..d419cf571 100644
--- a//cli/latest/reference/cloudfront/create-trust-store.md
+++ b//cli/latest/reference/cloudfront/create-trust-store.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.48 Command Reference](../../index.html) »
@@ -68,0 +69 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf
+    [--use-client-certificate-ocsp-endpoint | --no-use-client-certificate-ocsp-endpoint]
@@ -153,0 +155,4 @@ JSON Syntax:
+`--use-client-certificate-ocsp-endpoint` | `--no-use-client-certificate-ocsp-endpoint` (boolean)
+
+> A Boolean that determines whether to use the CA certificate’s OCSP endpoint to check certificate revocation status.
+
@@ -365,0 +371,4 @@ TrustStore -> (structure)
+> 
+> UseClientCertificateOCSPEndpoint -> (boolean)
+>
+>> A Boolean that determines whether the trust store uses the CA certificate’s OCSP endpoint to check certificate revocation status.
@@ -381 +390 @@ ETag -> (string)
-  * [AWS CLI 2.34.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.48 Command Reference](../../index.html) »