interface CodeSigningPoliciesProperty
| Language | Type name |
|---|---|
 .NET | Amazon.CDK.Mixins.Preview.AWS.Lambda.Mixins.CfnCodeSigningConfigPropsMixin.CodeSigningPoliciesProperty |
 Go | github.com/aws/aws-cdk-go/awscdkmixinspreview/v2/awslambda/mixins#CfnCodeSigningConfigPropsMixin_CodeSigningPoliciesProperty |
 Java | software.amazon.awscdk.mixins.preview.services.lambda.mixins.CfnCodeSigningConfigPropsMixin.CodeSigningPoliciesProperty |
 Python | aws_cdk.mixins_preview.aws_lambda.mixins.CfnCodeSigningConfigPropsMixin.CodeSigningPoliciesProperty |
 TypeScript | @aws-cdk/mixins-preview » aws_lambda » mixins » CfnCodeSigningConfigPropsMixin » CodeSigningPoliciesProperty |
Code signing configuration policies specify the validation failure action for signature mismatch or expiry.
Example
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { mixins as lambda_mixins } from '@aws-cdk/mixins-preview/aws-lambda';
const codeSigningPoliciesProperty: lambda_mixins.CfnCodeSigningConfigPropsMixin.CodeSigningPoliciesProperty = {
untrustedArtifactOnDeployment: 'untrustedArtifactOnDeployment',
};
Properties
| Name | Type | Description |
|---|---|---|
| untrusted | string | Code signing configuration policy for deployment validation failure. |
untrustedArtifactOnDeployment?
Type:
string
(optional, default: "Warn")
Code signing configuration policy for deployment validation failure.
If you set the policy to Enforce , Lambda blocks the deployment request if signature validation checks fail. If you set the policy to Warn , Lambda allows the deployment and issues a new Amazon CloudWatch metric ( SignatureValidationErrors ) and also stores the warning in the CloudTrail log.
Default value: Warn