aws-cdk-lib.aws_lambda.CfnCodeSigningConfig.CodeSigningPoliciesProperty

CodeSigningPoliciesProperty Struct

Code signing configuration policies specify the validation failure action for signature mismatch or expiry.

Source

Generated code

Type last changed

v2.93.0 · 23 Aug 2023

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_lambda as lambda } from 'aws-cdk-lib';
const codeSigningPoliciesProperty: lambda.CfnCodeSigningConfig.CodeSigningPoliciesProperty = {
  untrustedArtifactOnDeployment: 'untrustedArtifactOnDeployment',
};

Properties

untrustedArtifactOnDeploymentstringuntrusted_artifact_on_deploymentstruntrustedArtifactOnDeploymentStringUntrustedArtifactOnDeploymentstringUntrustedArtifactOnDeployment*string= "Warn"required#

Code signing configuration policy for deployment validation failure.

notes

If you set the policy to Enforce , Lambda blocks the deployment request if signature validation checks fail. If you set the policy to Warn , Lambda allows the deployment and issues a new Amazon CloudWatch metric ( SignatureValidationErrors ) and also stores the warning in the CloudTrail log.

Default value: Warn