Skip to content

Lambda  >  Structures  >  CodeSigningPolicies

CodeSigningPolicies

Structure Class

CodeSigningPolicies dataclass

Code signing configuration policies specify the validation failure action for signature mismatch or expiry.

Attributes

untrusted_artifact_on_deployment class-attribute instance-attribute 
untrusted_artifact_on_deployment: CodeSigningPolicy | None = None

Code signing configuration policy for deployment validation failure. If you set the policy to Enforce, Lambda blocks the deployment request if signature validation checks fail. If you set the policy to Warn, Lambda allows the deployment and issues a new Amazon CloudWatch metric (SignatureValidationErrors) and also stores the warning in the CloudTrail log.

Default value: Warn