code_signing_configs

Creates, updates, deletes, gets or lists a code_signing_configs resource.

Overview

Name	code_signing_configs
Type	Resource
Id	aws.lambda.code_signing_configs

Fields

The following fields are returned by SELECT queries:

get_code_signing_config

Name	Datatype	Description
allowed_publishers	object	List of signing profiles that can sign a code package.
code_signing_config_arn	string	The Amazon Resource Name (ARN) of the Code signing configuration. (pattern: <code>arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:code-signing-config:csc-[a-z0-9]{17}</code>)
code_signing_config_id	string	Unique identifer for the Code signing configuration. (pattern: <code>csc-[a-zA-Z0-9-_.]{17}</code>)
code_signing_policies	object	Code signing configuration policies specify the validation failure action for signature mismatch or expiry.
description	string	Code signing configuration description.
last_modified	string	The date and time that the Code signing configuration was last modified, in ISO-8601 format (YYYY-MM-DDThh:mm:ss.sTZD). (pattern: <code>.*</code>)

list_code_signing_configs

Name	Datatype	Description
allowed_publishers	object	List of signing profiles that can sign a code package.
code_signing_config_arn	string	The Amazon Resource Name (ARN) of the Code signing configuration. (pattern: <code>arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:code-signing-config:csc-[a-z0-9]{17}</code>)
code_signing_config_id	string	Unique identifer for the Code signing configuration. (pattern: <code>csc-[a-zA-Z0-9-_.]{17}</code>)
code_signing_policies	object	Code signing configuration policies specify the validation failure action for signature mismatch or expiry.
description	string	Code signing configuration description.
last_modified	string	The date and time that the Code signing configuration was last modified, in ISO-8601 format (YYYY-MM-DDThh:mm:ss.sTZD). (pattern: <code>.*</code>)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_code_signing_config	select	code_signing_config_arn, region		Returns information about the specified code signing configuration.
list_code_signing_configs	select	region	Marker, MaxItems	Returns a list of code signing configurations. A request returns up to 10,000 configurations per call. You can use the MaxItems parameter to return fewer configurations per call.
create_code_signing_config	insert	region, AllowedPublishers		Creates a code signing configuration. A code signing configuration defines a list of allowed signing profiles and defines the code-signing validation policy (action to be taken if deployment validation checks fail).
update_code_signing_config	update	code_signing_config_arn, region		Update the code signing configuration. Changes to the code signing configuration take effect the next time a user tries to deploy a code package to the function.
delete_code_signing_config	delete	code_signing_config_arn, region		Deletes the code signing configuration. You can delete the code signing configuration only if no function is using it.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
code_signing_config_arn	string	The The Amazon Resource Name (ARN) of the code signing configuration.
region	string	AWS region (default: us-east-1)
Marker	string	Specify the pagination token that's returned by a previous request to retrieve the next page of results.
MaxItems	integer	Maximum number of items to return.

SELECT examples

get_code_signing_config

Returns information about the specified code signing configuration.

SELECT
allowed_publishers,
code_signing_config_arn,
code_signing_config_id,
code_signing_policies,
description,
last_modified
FROM aws.lambda.code_signing_configs
WHERE code_signing_config_arn = '{{ code_signing_config_arn }}' -- required
AND region = '{{ region }}' -- required
;

list_code_signing_configs

Returns a list of code signing configurations. A request returns up to 10,000 configurations per call. You can use the MaxItems parameter to return fewer configurations per call.

SELECT
allowed_publishers,
code_signing_config_arn,
code_signing_config_id,
code_signing_policies,
description,
last_modified
FROM aws.lambda.code_signing_configs
WHERE region = '{{ region }}' -- required
AND Marker = '{{ Marker }}'
AND MaxItems = '{{ MaxItems }}'
;

INSERT examples

create_code_signing_config

Creates a code signing configuration. A code signing configuration defines a list of allowed signing profiles and defines the code-signing validation policy (action to be taken if deployment validation checks fail).

INSERT INTO aws.lambda.code_signing_configs (
Description,
AllowedPublishers,
CodeSigningPolicies,
Tags,
region
)
SELECT 
'{{ Description }}',
'{{ AllowedPublishers }}' /* required */,
'{{ CodeSigningPolicies }}',
'{{ Tags }}',
'{{ region }}'
RETURNING
code_signing_config
;

Manifest

# Description fields are for documentation purposes
- name: code_signing_configs
props:
  - name: region
    value: "{{ region }}"
    description: Required parameter for the code_signing_configs resource.
  - name: Description
    value: "{{ Description }}"
  - name: AllowedPublishers
    description: |
      List of signing profiles that can sign a code package.
    value:
      SigningProfileVersionArns:
        - "{{ SigningProfileVersionArns }}"
  - name: CodeSigningPolicies
    description: |
      Code signing configuration policies specify the validation failure action for signature mismatch or expiry.
    value:
      UntrustedArtifactOnDeployment: "{{ UntrustedArtifactOnDeployment }}"
  - name: Tags
    value: "{{ Tags }}"

UPDATE examples

update_code_signing_config

Update the code signing configuration. Changes to the code signing configuration take effect the next time a user tries to deploy a code package to the function.

UPDATE aws.lambda.code_signing_configs
SET 
Description = '{{ Description }}',
AllowedPublishers = '{{ AllowedPublishers }}',
CodeSigningPolicies = '{{ CodeSigningPolicies }}'
WHERE 
code_signing_config_arn = '{{ code_signing_config_arn }}' --required
AND region = '{{ region }}' --required
RETURNING
code_signing_config;

DELETE examples

delete_code_signing_config

Deletes the code signing configuration. You can delete the code signing configuration only if no function is using it.

DELETE FROM aws.lambda.code_signing_configs
WHERE code_signing_config_arn = '{{ code_signing_config_arn }}' --required
AND region = '{{ region }}' --required
;