aws-cdk-lib.aws_lambda.CodeSigningConfigProps

CodeSigningConfigProps Struct

Construction properties for a Code Signing Config object.

CodeSigningConfigProps

used as props by

• CodeSigningConfig

Source

aws-lambda/lib/code-signing-config.ts

Example

import * as signer from 'aws-cdk-lib/aws-signer';

const signingProfile = new signer.SigningProfile(this, 'SigningProfile', {
  platform: signer.Platform.AWS_LAMBDA_SHA384_ECDSA,
});

const codeSigningConfig = new lambda.CodeSigningConfig(this, 'CodeSigningConfig', {
  signingProfiles: [signingProfile],
});

new lambda.Function(this, 'Function', {
  codeSigningConfig,
  runtime: lambda.Runtime.NODEJS_LATEST,
  handler: 'index.handler',
  code: lambda.Code.fromAsset(path.join(__dirname, 'lambda-handler')),
});

Properties

descriptionstringdescriptionstrdescriptionStringDescriptionstringDescription*string#

Code signing configuration description.

Default: No description.

signingProfilesISigningProfile[]signing_profilestyping.List[ISigningProfile]signingProfilesList<ISigningProfile>SigningProfilesISigningProfile[]SigningProfiles*[]ISigningProfilerequired#

List of signing profiles that defines a trusted user who can sign a code package.

untrustedArtifactOnDeploymentUntrustedArtifactOnDeploymentuntrusted_artifact_on_deploymentUntrustedArtifactOnDeploymentuntrustedArtifactOnDeploymentUntrustedArtifactOnDeploymentUntrustedArtifactOnDeploymentUntrustedArtifactOnDeploymentUntrustedArtifactOnDeploymentUntrustedArtifactOnDeployment#

Code signing configuration policy for deployment validation failure.

Default: UntrustedArtifactOnDeployment.WARN

If you set the policy to Enforce, Lambda blocks the deployment request if signature validation checks fail. If you set the policy to Warn, Lambda allows the deployment and creates a CloudWatch log.