# CfnCodeSigningConfigProps

Properties for defining a `CfnCodeSigningConfig`.

- Source: Generated code
- Type last changed: v2.159.0 · 19 Sep 2024

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_lambda as lambda } from 'aws-cdk-lib';
const cfnCodeSigningConfigProps: lambda.CfnCodeSigningConfigProps = {
  allowedPublishers: {
    signingProfileVersionArns: ['signingProfileVersionArns'],
  },

  // the properties below are optional
  codeSigningPolicies: {
    untrustedArtifactOnDeployment: 'untrustedArtifactOnDeployment',
  },
  description: 'description',
  tags: [{
    key: 'key',
    value: 'value',
  }],
};
```

## Properties

- `allowedPublishers`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnCodeSigningConfig.AllowedPublishersProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_lambda.CfnCodeSigningConfig.AllowedPublishersProperty.html) (required) — List of allowed publishers.

- `codeSigningPolicies`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnCodeSigningConfig.CodeSigningPoliciesProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_lambda.CfnCodeSigningConfig.CodeSigningPoliciesProperty.html) — The code signing policy controls the validation failure action for signature mismatch or expiry.

- `description`: string — Code signing configuration description.

- `tags`: [CfnTag](/cdk/api/v2/docs/aws-cdk-lib.CfnTag.html)[] — A list of tags to add to the code signing configuration.

  > You must have the `lambda:TagResource` , `lambda:UntagResource` , and `lambda:ListTags` permissions for your [IAM principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CloudFormation stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.

## Used as props by

- [`CfnCodeSigningConfig`](/v2/docs/aws-cdk-lib.aws_lambda.CfnCodeSigningConfig)