# CodeSigningConfigProps

Construction properties for a Code Signing Config object.

Extends: CodeSigningConfigProps
Used as props by: CodeSigningConfig

- Source: [`aws-lambda/lib/code-signing-config.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-lambda/lib/code-signing-config.ts#L48)

## Example

```ts
import * as signer from 'aws-cdk-lib/aws-signer';

const signingProfile = new signer.SigningProfile(this, 'SigningProfile', {
  platform: signer.Platform.AWS_LAMBDA_SHA384_ECDSA,
});

const codeSigningConfig = new lambda.CodeSigningConfig(this, 'CodeSigningConfig', {
  signingProfiles: [signingProfile],
});

new lambda.Function(this, 'Function', {
  codeSigningConfig,
  runtime: lambda.Runtime.NODEJS_LATEST,
  handler: 'index.handler',
  code: lambda.Code.fromAsset(path.join(__dirname, 'lambda-handler')),
});
```

## Properties

- `description`: string — Code signing configuration description.

  **Default:** No description.

- `signingProfiles`: [ISigningProfile](/cdk/api/v2/docs/aws-cdk-lib.aws_signer.ISigningProfile.html)[] (required) — List of signing profiles that defines a trusted user who can sign a code package.

- `untrustedArtifactOnDeployment`: [UntrustedArtifactOnDeployment](/cdk/api/v2/docs/aws-cdk-lib.aws_lambda.UntrustedArtifactOnDeployment.html) — Code signing configuration policy for deployment validation failure.

  **Default:** UntrustedArtifactOnDeployment.WARN

  If you set the policy to Enforce, Lambda blocks the deployment request
  if signature validation checks fail.
  If you set the policy to Warn, Lambda allows the deployment and
  creates a CloudWatch log.