software.amazon.awscdk.services.lambda

Interface CodeSigningConfigProps

All Known Implementing Classes:

CodeSigningConfigProps.Jsii$Proxy

@Generated(value="jsii-pacmak/1.74.0 (build 6d08790)",
           date="2023-03-22T19:35:44.119Z")
public interface CodeSigningConfigProps

Construction properties for a Code Signing Config object.

Example:

 import software.amazon.awscdk.services.signer.*;
 SigningProfile signingProfile = SigningProfile.Builder.create(this, "SigningProfile")
         .platform(Platform.AWS_LAMBDA_SHA384_ECDSA)
         .build();
 CodeSigningConfig codeSigningConfig = CodeSigningConfig.Builder.create(this, "CodeSigningConfig")
         .signingProfiles(List.of(signingProfile))
         .build();
 Function.Builder.create(this, "Function")
         .codeSigningConfig(codeSigningConfig)
         .runtime(Runtime.NODEJS_16_X)
         .handler("index.handler")
         .code(Code.fromAsset(join(__dirname, "lambda-handler")))
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	CodeSigningConfigProps.Builder A builder for CodeSigningConfigProps
static class	CodeSigningConfigProps.Jsii$Proxy An implementation for CodeSigningConfigProps

Method Summary

Modifier and Type	Method and Description
static CodeSigningConfigProps.Builder	builder()
default java.lang.String	getDescription() Code signing configuration description.
java.util.List<ISigningProfile>	getSigningProfiles() List of signing profiles that defines a trusted user who can sign a code package.
default UntrustedArtifactOnDeployment	getUntrustedArtifactOnDeployment() Code signing configuration policy for deployment validation failure.

Method Detail

getSigningProfiles

java.util.List<ISigningProfile> getSigningProfiles()

List of signing profiles that defines a trusted user who can sign a code package.

getDescription

default java.lang.String getDescription()

Code signing configuration description.

Default: - No description.

getUntrustedArtifactOnDeployment

default UntrustedArtifactOnDeployment getUntrustedArtifactOnDeployment()

Code signing configuration policy for deployment validation failure.

If you set the policy to Enforce, Lambda blocks the deployment request if signature validation checks fail. If you set the policy to Warn, Lambda allows the deployment and creates a CloudWatch log.

Default: UntrustedArtifactOnDeployment.WARN

builder

static CodeSigningConfigProps.Builder builder()

Returns:

a CodeSigningConfigProps.Builder of CodeSigningConfigProps