Skip to content

AwsAlbSpiffeOptions

Defined in: src/http/spiffe.ts:457

Configuration for AWS ALB mTLS verify-mode leaf certificates.

readonly optional leafHeader?: string;

Defined in: src/http/spiffe.ts:463

Header containing ALB’s URL-encoded PEM leaf certificate.


readonly optional maxHeaderBytes?: number;

Defined in: src/http/spiffe.ts:465

Maximum encoded certificate-header size.


readonly trustDomains: Iterable<string>;

Defined in: src/http/spiffe.ts:459

SPIFFE trust domains accepted from validated workload IDs.


readonly trustedProxyAddresses: Iterable<string>;

Defined in: src/http/spiffe.ts:461

Exact normalized ALB IP literals permitted to assert evidence.