@aws-cdk/aws-signer

AWS::Signer Construct Library

---

---

AWS Signer is a fully managed code-signing service to ensure the trust and integrity of your code. Organizations validate code against a digital signature to confirm that the code is unaltered and from a trusted publisher. For more information, see What Is AWS Signer?

Table of Contents

• Signing Platform
• Signing Profile

Signing Platform

A signing platform is a predefined set of instructions that specifies the signature format and signing algorithms that AWS Signer should use to sign a zip file. For more information go to Signing Platforms in AWS Signer.

AWS Signer provides a pre-defined set of signing platforms. They are available in the CDK as -

Platform.AWS_IOT_DEVICE_MANAGEMENT_SHA256_ECDSA
Platform.AWS_LAMBDA_SHA384_ECDSA
Platform.AMAZON_FREE_RTOS_TI_CC3220SF
Platform.AMAZON_FREE_RTOS_DEFAULT

Signing Profile

A signing profile is a code-signing template that can be used to pre-define the signature specifications for a signing job. A signing profile includes a signing platform to designate the file type to be signed, the signature format, and the signature algorithms. For more information, visit Signing Profiles in AWS Signer.

The following code sets up a signing profile for signing lambda code bundles -

const signingProfile = new signer.SigningProfile(this, 'SigningProfile', { 
  platform: signer.Platform.AWS_LAMBDA_SHA384_ECDSA,
});

A signing profile is valid by default for 135 months. This can be modified by specifying the signatureValidityPeriod property.

Changelog

1.153.0 (2022-04-21)

Features

• apigatewayv2: set throttling on stages (#19776) (3cabd10), closes #19626
• autoscaling: Auto Scaling Group with Launch Template (#19066) (1581af0), closes #6734
• aws-ecr: make it easy to reference image tag or digest, use everywhere (#19799) (380774e), closes #13299 #15333
• cfnspec: cloudformation spec v66.0.0 (#19812) (43735fd), closes #19798
• cfnspec: cloudformation spec v66.1.0 (#19929) (8c8b6b6)
• cli: glob-style key matching to context --reset (#19840) (edb4119), closes #19797
• codebuild: add ability to customize build status reporting for third-party Git sources (#19408) (423d72f)
• codepipeline: allow to disable stage transition (#19911) (ac9901a), closes #1649
• integ-runner: add missing features from the integ manifest (#19969) (2ca5050)
• integ-runner: integ-runner enhancements (#19865) (697fdbe)
• integ-runner: test update path when running tests (#19915) (d0ace8f)
• integ-tests: Add IntegTestCase (#19829) (ad249c9)
• iotevents: support comparison operators (#19329) (95cb3f3)
• lambda: function URLs (#19817) (4fd515a), closes #19798
• logs: add QueryDefinition L2 Construct (#18655) (fcf981b)
• route53: fromPublicHostedZoneAttributes method with zoneName (#19771) (7867dc4), closes #18700
• s3-deployment: ephemeral storage size property for bucket deployment (#19958) (3ce40b4), closes #19947
• check for accidental exposure of secrets (#19543) (789e8d2)

Bug Fixes

• autoscaling: update validation on maxInstanceLifetime (#19584) (d115b47)
• aws-cloudfront: Add sslSupportMethod (#19737) (c5a9679), closes #19476
• aws-ecr-assets: correct file existence validation in tests (#19945) (d4c13c0), closes 40aws-cdk/aws-ecr-assets/test/image-asset.test.ts#L387 #19944
• cfn-diff: allow resources to change types (#19891) (4f3a340), closes #13921
• cfn-include: detect a resource cycle in the included template (#19871) (2c2bc0b), closes #16654
• cfnspec: aws-sam deployment preferences hooks (#19732) (a205734)
• cfnSpec: wrong type for SAM API properties GatewayResponses and Models (#19885) (b214ede), closes #19870
• cli: hangs on retrieving notices (#19967) (daeeafa), closes #19542
• cli: stack monitor prints over error messages (#19859) (42e5d08), closes #19742
• cloudwatch: MathExpression id contract is not clear (#19825) (5472b11), closes #13942 #17126
• core: exportValue does not work on number attributes (#19818) (12459ca), closes #19537
• docdb: make most attributes of DatabaseClusterAttributes optional (#19625) (5f6d20c), closes #14492
• ecr: scanOnPush not supported in certain regions (#19940) (2ff3143), closes #19918
• ecs: get rid of EFS casing warnings (#19681) (eafc11a), closes #15025
• eks: malformed command when installing helm chart from OCI artifact (#19778) (f8babb8), closes /github.com/aws/aws-cdk/pull/18547#issuecomment-1088737549
• iam: role/group/user's path not included in ARN (#13258) (ef2b480), closes #13156
• integ-runner: enable all feature flags by default (#19955) (ca3920d)
• lambda-event-sources: unsupported property onFailure for KafkaEventSources (#19995) (383171b), closes #19917
• rds: MySQL 8.0 uses wrong Parameter for S3 export (#19775) (5a895a3), closes #19735
• stepfunctions: incorrect default documentation for integrationPattern (#19936) (4cb3b2b), closes #19815

Reverts

• "feat(cli): glob-style key matching to context --reset (#19840)" (#19888) (89ec597)