Package software.amazon.awscdk.services.signer

package software.amazon.awscdk.services.signer

AWS::Signer Construct Library

AWS Signer is a fully managed code-signing service to ensure the trust and integrity of your code. Organizations validate code against a digital signature to confirm that the code is unaltered and from a trusted publisher. For more information, see What Is AWS Signer?

Table of Contents

• Signing Platform
• Signing Profile

Signing Platform

A signing platform is a predefined set of instructions that specifies the signature format and signing algorithms that AWS Signer should use to sign a zip file. For more information go to Signing Platforms in AWS Signer.

AWS Signer provides a pre-defined set of signing platforms. They are available in the CDK as -

 Platform.AWS_IOT_DEVICE_MANAGEMENT_SHA256_ECDSA
 Platform.AWS_LAMBDA_SHA384_ECDSA
 Platform.AMAZON_FREE_RTOS_TI_CC3220SF
 Platform.AMAZON_FREE_RTOS_DEFAULT
 

Signing Profile

A signing profile is a code-signing template that can be used to pre-define the signature specifications for a signing job. A signing profile includes a signing platform to designate the file type to be signed, the signature format, and the signature algorithms. For more information, visit Signing Profiles in AWS Signer.

The following code sets up a signing profile for signing lambda code bundles -

 SigningProfile signingProfile = SigningProfile.Builder.create(this, "SigningProfile")
         .platform(Platform.AWS_LAMBDA_SHA384_ECDSA)
         .build();
 

A signing profile is valid by default for 135 months. This can be modified by specifying the signatureValidityPeriod property.

Class	Description
CfnProfilePermission	Adds cross-account permissions to a signing profile.
CfnProfilePermission.Builder	A fluent builder for CfnProfilePermission.
CfnProfilePermissionProps	Properties for defining a CfnProfilePermission.
CfnProfilePermissionProps.Builder	A builder for CfnProfilePermissionProps
CfnProfilePermissionProps.Jsii$Proxy	An implementation for CfnProfilePermissionProps
CfnSigningProfile	Creates a signing profile.
CfnSigningProfile.Builder	A fluent builder for CfnSigningProfile.
CfnSigningProfile.SignatureValidityPeriodProperty	The validity period for the signing job.
CfnSigningProfile.SignatureValidityPeriodProperty.Builder	A builder for CfnSigningProfile.SignatureValidityPeriodProperty
CfnSigningProfile.SignatureValidityPeriodProperty.Jsii$Proxy	An implementation for CfnSigningProfile.SignatureValidityPeriodProperty
CfnSigningProfileProps	Properties for defining a CfnSigningProfile.
CfnSigningProfileProps.Builder	A builder for CfnSigningProfileProps
CfnSigningProfileProps.Jsii$Proxy	An implementation for CfnSigningProfileProps
ISigningProfile	A Signer Profile.
ISigningProfile.Jsii$Default	Internal default implementation for ISigningProfile.
ISigningProfile.Jsii$Proxy	A proxy class which represents a concrete javascript instance of this type.
Platform	Platforms that are allowed with signing config.
SigningProfile	Defines a Signing Profile.
SigningProfile.Builder	A fluent builder for SigningProfile.
SigningProfileAttributes	A reference to a Signing Profile.
SigningProfileAttributes.Builder	A builder for SigningProfileAttributes
SigningProfileAttributes.Jsii$Proxy	An implementation for SigningProfileAttributes
SigningProfileProps	Construction properties for a Signing Profile object.
SigningProfileProps.Builder	A builder for SigningProfileProps
SigningProfileProps.Jsii$Proxy	An implementation for SigningProfileProps