awscc.lambda_codesigningconfig

Filters

  • event

  • reduce

  • value

Actions

delete

Parent base class for filters and actions.

properties:
  type:
    enum:
    - delete
required:
- type

Permissions - lambda:DeleteCodeSigningConfig

update

Parent base class for filters and actions.

definitions:
  AllowedPublishers:
    additionalProperties: false
    description: When the CodeSigningConfig is later on attached to a function, the
      function code will be expected to be signed by profiles from this list
    properties:
      SigningProfileVersionArns:
        description: List of Signing profile version Arns
        items:
          maxLength: 1024
          minLength: 12
          pattern: arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)
          type: string
        maxItems: 20
        minItems: 1
        type: array
    required:
    - SigningProfileVersionArns
    type: object
  CodeSigningPolicies:
    additionalProperties: false
    description: Policies to control how to act if a signature is invalid
    properties:
      UntrustedArtifactOnDeployment:
        default: Warn
        description: Indicates how Lambda operations involve updating the code artifact
          will operate. Default to Warn if not provided
        enum:
        - Warn
        - Enforce
        type: string
    required:
    - UntrustedArtifactOnDeployment
    type: object
properties:
  AllowedPublishers:
    additionalProperties: false
    description: When the CodeSigningConfig is later on attached to a function, the
      function code will be expected to be signed by profiles from this list
    properties:
      SigningProfileVersionArns:
        description: List of Signing profile version Arns
        items:
          maxLength: 1024
          minLength: 12
          pattern: arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)
          type: string
        maxItems: 20
        minItems: 1
        type: array
    required:
    - SigningProfileVersionArns
    type: object
  CodeSigningPolicies:
    additionalProperties: false
    description: Policies to control how to act if a signature is invalid
    properties:
      UntrustedArtifactOnDeployment:
        default: Warn
        description: Indicates how Lambda operations involve updating the code artifact
          will operate. Default to Warn if not provided
        enum:
        - Warn
        - Enforce
        type: string
    required:
    - UntrustedArtifactOnDeployment
    type: object
  Description:
    description: A description of the CodeSigningConfig
    maxLength: 256
    minLength: 0
    type: string
  type:
    enum:
    - update

Permissions - lambda:UpdateCodeSigningConfig