---
title: "POST /trustStores"
method: POST
path: "/trustStores"
---

# POST /trustStores

`POST /trustStores`

Creates a trust store that can be associated with a web portal. A trust store contains certificate authority (CA) certificates. Once associated with a web portal, the browser in a streaming session will recognize certificates that have been issued using any of the CAs in the trust store. If your organization has internal websites that use certificates issued by private CAs, you should add the private CA certificate to the trust store.

## Request body

- object
  - `certificateList` CertificateAuthorityBody[], required — A list of CA certificates to be added to the trust store.
  - `tags` Tag[] — The tags to add to the trust store. A tag is a key-value pair.
    - `Key` string, password, required — The key of the tag.
    - `Value` string, password, required — The value of the tag
  - `clientToken` string — <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token returns the result from the original successful request. </p> <p>If you do not specify a client token, one is automatically generated by the Amazon Web Services SDK.</p>

## Response `200`

Success

- CreateTrustStoreResponse
  - `trustStoreArn` string, required — The ARN of the trust store.

## Other responses

- `480` — InternalServerException
- `481` — AccessDeniedException
- `482` — ThrottlingException
- `483` — ServiceQuotaExceededException
- `484` — ValidationException
- `485` — ConflictException

---

[API](https://skmtc.net/aws/apis/workspaces-web.md) · [All operations](https://skmtc.net/aws/apis/workspaces-web/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/workspaces-web/versions/4206b0208021/schema)