Skip to content

Instantly share code, notes, and snippets.

@karl-cardenas-coding
Last active December 5, 2020 18:22
Show Gist options
  • Save karl-cardenas-coding/5984f6426e735317437fcd6a30b26e6d to your computer and use it in GitHub Desktop.
Save karl-cardenas-coding/5984f6426e735317437fcd6a30b26e6d to your computer and use it in GitHub Desktop.
Enabling AWS Code Signing
##############################################
# Code Signing Resources Option 1 & Option 2
#############################################
resource "aws_signer_signing_profile" "abc-signer-profile" {
name_prefix = "abc_"
platform_id = "AWSLambda-SHA384-ECDSA"
tags = var.tags
}
resource "aws_lambda_code_signing_config" "abc-signer-profile-config" {
allowed_publishers {
signing_profile_version_arns = [aws_signer_signing_profile.abc-signer-profile.version_arn]
}
policies {
untrusted_artifact_on_deployment = "Enforce"
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment