signing_configurations

Creates, updates, deletes, gets or lists a signing_configurations resource.

Overview

Name	signing_configurations
Type	Resource
Id	aws.ecr.signing_configurations

Fields

The following fields are returned by SELECT queries:

get_signing_configuration

Name	Datatype	Description
registry_id	string	The Amazon Web Services account ID associated with the registry. (pattern: <code>[0-9]{12}</code>)
signing_configuration	object	The registry's signing configuration.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_signing_configuration	select	region		Retrieves the registry's signing configuration, which defines rules for automatically signing images using Amazon Web Services Signer. For more information, see Managed signing in the Amazon Elastic Container Registry User Guide.
put_signing_configuration	replace	region, signingConfiguration		Creates or updates the registry's signing configuration, which defines rules for automatically signing images with Amazon Web Services Signer. For more information, see Managed signing in the Amazon Elastic Container Registry User Guide. To successfully generate a signature, the IAM principal pushing images must have permission to sign payloads with the Amazon Web Services Signer signing profile referenced in the signing configuration.
delete_signing_configuration	delete	region		Deletes the registry's signing configuration. Images pushed after deletion of the signing configuration will no longer be automatically signed. For more information, see Managed signing in the Amazon Elastic Container Registry User Guide. Deleting the signing configuration does not affect existing image signatures.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

get_signing_configuration

Retrieves the registry's signing configuration, which defines rules for automatically signing images using Amazon Web Services Signer. For more information, see Managed signing in the Amazon Elastic Container Registry User Guide.

SELECT
registry_id,
signing_configuration
FROM aws.ecr.signing_configurations
WHERE region = '{{ region }}' -- required
;

REPLACE examples

put_signing_configuration

Creates or updates the registry's signing configuration, which defines rules for automatically signing images with Amazon Web Services Signer. For more information, see Managed signing in the Amazon Elastic Container Registry User Guide. To successfully generate a signature, the IAM principal pushing images must have permission to sign payloads with the Amazon Web Services Signer signing profile referenced in the signing configuration.

REPLACE aws.ecr.signing_configurations
SET 
signingConfiguration = '{{ signingConfiguration }}'
WHERE 
region = '{{ region }}' --required
AND signingConfiguration = '{{ signingConfiguration }}' --required
RETURNING
signing_configuration;

DELETE examples

delete_signing_configuration

Deletes the registry's signing configuration. Images pushed after deletion of the signing configuration will no longer be automatically signed. For more information, see Managed signing in the Amazon Elastic Container Registry User Guide. Deleting the signing configuration does not affect existing image signatures.

DELETE FROM aws.ecr.signing_configurations
WHERE region = '{{ region }}' --required
;