# CodeSigningPoliciesProperty

Code signing configuration [policies](https://docs.aws.amazon.com/lambda/latest/dg/configuration-codesigning.html#config-codesigning-policies) specify the validation failure action for signature mismatch or expiry.

- Source: Generated code
- Type last changed: v2.93.0 · 23 Aug 2023

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_lambda as lambda } from 'aws-cdk-lib';
const codeSigningPoliciesProperty: lambda.CfnCodeSigningConfig.CodeSigningPoliciesProperty = {
  untrustedArtifactOnDeployment: 'untrustedArtifactOnDeployment',
};
```

## Properties

- `untrustedArtifactOnDeployment`: string (required) = "Warn" — Code signing configuration policy for deployment validation failure.

  If you set the policy to `Enforce` , Lambda blocks the deployment request if signature validation checks fail. If you set the policy to `Warn` , Lambda allows the deployment and issues a new Amazon CloudWatch metric ( `SignatureValidationErrors` ) and also stores the warning in the CloudTrail log.

  Default value: `Warn`