CodeSigningPoliciesProperty Struct
Code signing configuration policies specify the validation failure action for signature mismatch or expiry.
Example
ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_lambda as lambda } from 'aws-cdk-lib';
const codeSigningPoliciesProperty: lambda.CfnCodeSigningConfig.CodeSigningPoliciesProperty = {
untrustedArtifactOnDeployment: 'untrustedArtifactOnDeployment',
};
python
# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk import aws_lambda as lambda_
code_signing_policies_property = lambda.CfnCodeSigningConfig.CodeSigningPoliciesProperty(
untrusted_artifact_on_deployment="untrustedArtifactOnDeployment"
)
java
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import software.amazon.awscdk.services.lambda.*;
CodeSigningPoliciesProperty codeSigningPoliciesProperty = CodeSigningPoliciesProperty.builder()
.untrustedArtifactOnDeployment("untrustedArtifactOnDeployment")
.build();
csharp
// Install: dotnet add package Amazon.CDK.Lib
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.Lambda;
var codeSigningPoliciesProperty = new CodeSigningPoliciesProperty {
UntrustedArtifactOnDeployment = "untrustedArtifactOnDeployment"
};
go
// Install: go get github.com/aws/aws-cdk-go/awscdk/v2
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import "github.com/aws/aws-cdk-go/awscdk"
codeSigningPoliciesProperty := &CodeSigningPoliciesProperty{
UntrustedArtifactOnDeployment: jsii.String("untrustedArtifactOnDeployment"),
}
Properties
untrustedArtifactOnDeploymentstringuntrusted_artifact_on_deploymentstruntrustedArtifactOnDeploymentStringUntrustedArtifactOnDeploymentstringUntrustedArtifactOnDeployment*string= "Warn"required#Code signing configuration policy for deployment validation failure.
notes
If you set the policy to Enforce , Lambda blocks the deployment request if signature validation checks fail. If you set the policy to Warn , Lambda allows the deployment and issues a new Amazon CloudWatch metric ( SignatureValidationErrors ) and also stores the warning in the CloudTrail log.
Default value: Warn