{"id":3220,"date":"2023-08-01T07:37:37","date_gmt":"2023-08-01T07:37:37","guid":{"rendered":"https:\/\/signmycode.com\/resources\/?p=3220"},"modified":"2024-09-17T07:14:46","modified_gmt":"2024-09-17T07:14:46","slug":"how-to-configure-your-code-signing-for-aws-lambda","status":"publish","type":"post","link":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda","title":{"rendered":"How to Configure your Code Signing for AWS Lambda?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Configuring code signing for AWS Lambda is an essential step in ensuring the security and trustworthiness of your Lambda functions. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Meeting the Prerequisites<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A few prerequisites must be met before configuring code signing for a Lambda function. You will need to use AWS Signer to complete the following steps:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Create One or More Signing Profiles:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">These profiles will generate the signed code packages for your Lambda function. <a href=\"https:\/\/docs.aws.amazon.com\/signer\/latest\/developerguide\/console-profile.html\">Refer to the AWS Signer Developer Guide for creating signing profiles<\/a>. This guide provides comprehensive information on using AWS Signer and covers creating signing profiles.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Use a Signing Profile to Create a Signed Code Package:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Once you have created the signing profiles, you can utilize them to generate signed code packages for your Lambda function. This step ensures that the code packages are securely signed and can be trusted. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Again, the AWS Signer Developer Guide provides detailed instructions on creating signed code packages using signing profiles. Make sure to follow the guidelines for accurate and secure code signing.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Create Code Signing Configurations for the Lambda Function<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">After completing the prerequisites, you can create code signing configurations for your Lambda function. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Here&#8217;s how you can create a code signing configuration using the Lambda console:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 1:<\/mark><\/strong> Open the <strong>Lambda console<\/strong> and navigate to the &#8220;<strong>Code Signing Configurations<\/strong>&#8221; page.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"724\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-console-1024x724.png\" alt=\"Code Signing Configuration\" class=\"wp-image-3225\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-console-1024x724.png 1024w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-console-300x212.png 300w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-console-768x543.png 768w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-console.png 1053w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 2:<\/mark> <\/strong>Click the &#8220;<strong>Create Configuration<\/strong>&#8221; button to create a new configuration.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 3:<\/mark> <\/strong>Provide a descriptive name for the configuration in the &#8220;<strong>Description<\/strong>&#8221; field. This name should help you identify the purpose or usage of the configuration.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 4<\/mark>: <\/strong>Under the &#8220;<strong>Signing profiles<\/strong>&#8221; section, you can add up to 20 signing profiles to the configuration. Select the desired signing profiles from the available options or enter the profile version&#8217;s ARN (Amazon Resource Name).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 5:<\/mark> <\/strong>If needed, you can add signing profiles by clicking on the &#8220;<strong>Add signing profiles<\/strong>&#8221; button.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\"><strong>Step 6:<\/strong> <\/mark>Choose either the &#8220;<strong>Warn<\/strong>&#8221; or &#8220;<strong>Enforce<\/strong>&#8221; option for the &#8220;<strong>Signature validation policy<\/strong>.&#8221; This policy determines the action Lambda takes if any signature validation checks fail.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 7: <\/mark><\/strong>Once you have provided all the required information, click the &#8220;<strong>Create configuration<\/strong>&#8221; button to create the code signing configuration.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This configuration will define the allowed signing profiles and the signature validation policy, ensuring the security and trustworthiness of your code packages.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Implementing AWS Code Signing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AWS code signing provides several benefits to your process for Lambda functions. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One crucial aspect is that once you add a code signing configuration to a Lambda function, it will automatically disable Inline code Editing for that specific function, regardless of its size. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This ensures that only signed code packages are deployed within the Lambda environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>To enable code signing for your Lambda function, follow these steps:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 1:<\/mark><\/strong> Access the <strong>Configuration tab of the Lambda function<\/strong> in the AWS Management Console.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\"><strong>Step 2:<\/strong> <\/mark>Select the &#8220;<strong>Code signing<\/strong>&#8221; option and click on &#8220;<strong>Edit<\/strong>.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 3: <\/mark><\/strong>Choose the code signing configuration you have previously created from the available options.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"470\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/edit-code-signing-aws-lamba-1024x470.png\" alt=\"Edit Code Signing Aws Lamba\" class=\"wp-image-3226\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/edit-code-signing-aws-lamba-1024x470.png 1024w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/edit-code-signing-aws-lamba-300x138.png 300w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/edit-code-signing-aws-lamba-768x353.png 768w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/edit-code-signing-aws-lamba-1536x706.png 1536w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/edit-code-signing-aws-lamba-1568x720.png 1568w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/edit-code-signing-aws-lamba.png 1672w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 4: <\/mark>Save the changes<\/strong> to associate the code signing configuration with the function.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once the code signing configuration is applied, you will notice that Inline Code Editing has been disabled for that function, as indicated in the configuration settings.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now that you have configured code signing and disabled Inline Code Editing, the next step is to ensure that only signed packages are deployed while preventing the deployment of unsigned packages.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>To achieve this, you can create a signing job using AWS Signer. Here&#8217;s how you can proceed:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 1:<\/mark> <\/strong>Go to the <strong>AWS Signer service<\/strong> in the AWS Management Console.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 2: <\/mark><\/strong>Access the &#8220;<strong>Signing jobs<\/strong>&#8221; section and click on &#8220;Start signing job.&#8221;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"729\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-start-signing-job-1024x729.png\" alt=\"Start Signing Job\" class=\"wp-image-3227\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-start-signing-job-1024x729.png 1024w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-start-signing-job-300x213.png 300w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-start-signing-job-768x546.png 768w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-start-signing-job-1536x1093.png 1536w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-start-signing-job-1568x1116.png 1568w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-start-signing-job.png 1754w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 3: <\/mark><\/strong>Fill in the <strong>necessary details <\/strong>for the signing job, including the code package you want to sign.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\"><strong>Step 4:<\/strong> <\/mark>Follow the <strong>prompts and provide the required information<\/strong> to complete the signing job.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Creating and executing the signing job generates a digitally signed code package that can be deployed to your Lambda function. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This ensures that only trusted and signed packages are allowed for deployment, maintaining the security and integrity of your Lambda functions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to Update a Code Signing Configuration?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Suppose you need to make updates to a code signing configuration. In that case, it&#8217;s important to note that these changes will affect future deployments of functions associated with the particular code signing configuration.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Here&#8217;s how you can update a code signing configuration using the Lambda console:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 1:<\/mark><\/strong> Open the <strong>Lambda console<\/strong> and navigate to the &#8220;<strong>Code Signing Configurations<\/strong>&#8221; page.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\"><strong>Step 2:<\/strong> <\/mark>Select the code signing configuration you want to update and click the &#8220;<strong>Edit<\/strong>&#8221; button.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"631\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-edit-code-signing-profile-1024x631.png\" alt=\"Edit Code Signing Configuration\" class=\"wp-image-3228\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-edit-code-signing-profile-1024x631.png 1024w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-edit-code-signing-profile-300x185.png 300w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-edit-code-signing-profile-768x473.png 768w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/lamba-edit-code-signing-profile.png 1127w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 3:<\/mark> <\/strong>Provide a <strong>descriptive name<\/strong> for the configuration in the &#8220;<strong>Description<\/strong>&#8221; field if you wish to update it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\"><strong>Step 4<\/strong>:<\/mark> Under the &#8220;<strong>Signing profiles<\/strong>&#8221; section, you can add or remove up to 20 signing profiles for the configuration. Choose the desired signing profiles from the available options or enter the profile <strong>version&#8217;s ARN (Amazon Resource Name)<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\"><strong>Step 5:<\/strong> <\/mark>Click the &#8220;<strong>Add signing profiles<\/strong>&#8221; button to include an additional signing profile.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 6:<\/mark><\/strong> Choose either the &#8220;<strong>Warn<\/strong>&#8221; or &#8220;<strong>Enforce<\/strong>&#8221; option for the &#8220;Signature validation policy&#8221; based on your requirements.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 7:<\/mark> <\/strong>After making the necessary changes, click the &#8220;<strong>Save Changes<\/strong>&#8221; button to update the code signing configuration.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Steps to Delete Your Code Signing Configuration<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Remember that you can only proceed when deleting a code signing configuration if no functions are currently used. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Here&#8217;s how you can delete a code signing configuration using the Lambda console:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 1:<\/mark> <\/strong>Open the Lambda console to the &#8220;<strong>Code signing configurations<\/strong>&#8221; page.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 2:<\/mark> <\/strong>Select the code signing configuration you want to delete and click the &#8220;<strong>Delete<\/strong>&#8221; button.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\"><strong>Step 3:<\/strong> <\/mark>Confirm your decision by selecting &#8220;<strong>Delete<\/strong>&#8221; again.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"300\" src=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/delete-code-signing-configuration-1024x300.png\" alt=\"Delete Code Signing Certificate Lumba\" class=\"wp-image-3229\" srcset=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/delete-code-signing-configuration-1024x300.png 1024w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/delete-code-signing-configuration-300x88.png 300w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/delete-code-signing-configuration-768x225.png 768w, https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/delete-code-signing-configuration.png 1326w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Please note that you can only delete a code signing configuration if no functions currently utilize it. If any functions are still associated with the configuration, you must remove the configuration from those functions before proceeding with the deletion.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to Associate a Code Signing Configuration?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To enable code signing for a specific function, you must associate a code signing configuration with that function. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Here&#8217;s how you can do it using the Lambda console:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 1:<\/mark><\/strong> Open the <strong>Lambda console<\/strong> and navigate to the &#8220;<strong>Functions<\/strong>&#8221; page.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\"><strong>Step 2:<\/strong> <\/mark>Choose the function for which you want to <strong>enable code signing.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\"><strong>Step 3:<\/strong> <\/mark>Under the &#8220;<strong>Code signing configuration<\/strong>&#8221; section, click on the &#8220;Edit&#8221; button.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 4:<\/mark><\/strong> In the &#8220;<strong>Edit code signing<\/strong>&#8221; window, select the desired code signing configuration from the available options for this function.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#00b373\" class=\"has-inline-color\">Step 5: <\/mark><\/strong>After selecting the <strong>code signing configuration<\/strong>, click the &#8220;Save&#8221; button to associate it with the function.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Following these steps, you can enable code signing for the chosen function by associating the appropriate configuration.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Execute Policy Statement to Grants Permissions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When configuring IAM policies for code signing operations, you need to grant the necessary permissions to users or roles. By attaching policy statements to the user policy, you can provide access to the code signing API operations. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Here&#8217;s an example policy statement that grants permissions for creating, updating, and retrieving code signing configurations:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n&nbsp; \"Version\": \"2022-10-12\",\n&nbsp; \"Statement\": &#91;\n&nbsp;&nbsp;&nbsp; {\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"Effect\": \"Allow\",\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"Action\": &#91;\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"lambda:CreateCodeSigningConfig\",\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"lambda:UpdateCodeSigningConfig\",\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"lambda:GetCodeSigningConfig\"\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ],\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"Resource\": \"*\"\n&nbsp;&nbsp;&nbsp; }\n&nbsp; ]\n}<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Create a Function with a Specific Code Signing Configuration<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Administrators can use the \u2018CodeSigningConfigArn\u2019 condition key to specify the code signing configurations developers must use to create or update functions. Here&#8217;s an example policy statement that grants permission to create a function with a specific code signing configuration:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n&nbsp; \"Version\": \"2012-10-17\",\n&nbsp; \"Statement\": &#91;\n&nbsp;&nbsp;&nbsp; {\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"Sid\": \"AllowReferencingCodeSigningConfig\",\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"Effect\": \"Allow\",\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"Action\": &#91;\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"lambda:CreateFunction\"\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ],\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"Resource\": \"*\",\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"Condition\": {\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"StringEquals\": {\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"lambda:CodeSigningConfigArn\": \"arn:aws:lambda:us-west-2:123456789012:code-signing-config:csc-0d4518bd353a0a7c6\"\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }\n&nbsp;&nbsp;&nbsp; }\n&nbsp; ]\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">This policy statement includes a \u2018lambda:CodeSigningConfigArn\u2019 condition that specifies the allowed code signing configuration. If the \u2018CodeSigningConfigArn\u2019 parameter is missing or doesn&#8217;t match the specified value in the condition, Lambda blocks any `CreateFunction` API request.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By configuring the appropriate IAM policies, you can effectively manage user access and permissions for code signing operations in Lambda.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Configuring code signing for AWS Lambda is an essential step in ensuring the security and trustworthiness of your Lambda functions. Meeting the Prerequisites A few prerequisites must be met before configuring code signing for a Lambda function. You will need to use AWS Signer to complete the following steps: Create One or More Signing Profiles:&hellip; <a class=\"more-link\" href=\"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda\">Read More <span class=\"screen-reader-text\">How to Configure your Code Signing for AWS Lambda?<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":3231,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[412,415,416,414,413],"class_list":["post-3220","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-code-signing-tutorials","tag-aws-lambda-code-signing","tag-code-signing-for-aws-lambda","tag-code-signing-for-aws-lambda-function-using-aws-signer","tag-configuring-code-signing-for-aws-lambda","tag-lambda-code-signing","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Configure Code Signing for AWS Lambda?<\/title>\n<meta name=\"description\" content=\"Learn how to create AWS Lambda function from the AWS console, Creating code signing configurations, update, remove, enabling code signing for a function.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Configure Code Signing for AWS Lambda?\" \/>\n<meta property=\"og:description\" content=\"Learn how to create AWS Lambda function from the AWS console, Creating code signing configurations, update, remove, enabling code signing for a function.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda\" \/>\n<meta property=\"og:site_name\" content=\"SignMyCode - Resources\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-01T07:37:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-09-17T07:14:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/how-to-configure-code-signing-for-aws-lambda-jpg.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"912\" \/>\n\t<meta property=\"og:image:height\" content=\"440\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Janki Mehta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/how-to-configure-code-signing-for-aws-lambda-jpg.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@Sign_My_Code\" \/>\n<meta name=\"twitter:site\" content=\"@Sign_My_Code\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Janki Mehta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda\"},\"author\":{\"name\":\"Janki Mehta\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#\\\/schema\\\/person\\\/2e80276fd34fd5439c04cd3cb96a389f\"},\"headline\":\"How to Configure your Code Signing for AWS Lambda?\",\"datePublished\":\"2023-08-01T07:37:37+00:00\",\"dateModified\":\"2024-09-17T07:14:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda\"},\"wordCount\":1261,\"publisher\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/how-to-configure-code-signing-for-aws-lambda-jpg.webp\",\"keywords\":[\"aws Lambda Code Signing\",\"Code signing for AWS Lambda\",\"code signing for AWS Lambda function using AWS Signer\",\"Configuring code signing for AWS Lambda\",\"Lambda code signing\"],\"articleSection\":[\"Code Signing Tutorials\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda\",\"url\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda\",\"name\":\"How to Configure Code Signing for AWS Lambda?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/how-to-configure-code-signing-for-aws-lambda-jpg.webp\",\"datePublished\":\"2023-08-01T07:37:37+00:00\",\"dateModified\":\"2024-09-17T07:14:46+00:00\",\"description\":\"Learn how to create AWS Lambda function from the AWS console, Creating code signing configurations, update, remove, enabling code signing for a function.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda#primaryimage\",\"url\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/how-to-configure-code-signing-for-aws-lambda-jpg.webp\",\"contentUrl\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/how-to-configure-code-signing-for-aws-lambda-jpg.webp\",\"width\":912,\"height\":440,\"caption\":\"Configure Code Signing for AWS Lambda\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/how-to-configure-your-code-signing-for-aws-lambda#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Configure your Code Signing for AWS Lambda?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#website\",\"url\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/\",\"name\":\"SignMyCode - Resources\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#organization\",\"name\":\"SignMyCode\",\"url\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo1.png\",\"contentUrl\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo1.png\",\"width\":135,\"height\":86,\"caption\":\"SignMyCode\"},\"image\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Sign_My_Code\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/resources\\\/#\\\/schema\\\/person\\\/2e80276fd34fd5439c04cd3cb96a389f\",\"name\":\"Janki Mehta\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g\",\"caption\":\"Janki Mehta\"},\"description\":\"Janki Mehta is a Cyber-Security Enthusiast who constantly updates herself with new advancements in the Web\\\/Cyber Security niche. Along with theoretical knowledge, she also implements her practical expertise in day-to-day tasks and helps others to protect themselves from threats.\",\"sameAs\":[\"http:\\\/\\\/smcresources.ssltoolsonline.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Configure Code Signing for AWS Lambda?","description":"Learn how to create AWS Lambda function from the AWS console, Creating code signing configurations, update, remove, enabling code signing for a function.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda","og_locale":"en_US","og_type":"article","og_title":"How to Configure Code Signing for AWS Lambda?","og_description":"Learn how to create AWS Lambda function from the AWS console, Creating code signing configurations, update, remove, enabling code signing for a function.","og_url":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda","og_site_name":"SignMyCode - Resources","article_published_time":"2023-08-01T07:37:37+00:00","article_modified_time":"2024-09-17T07:14:46+00:00","og_image":[{"width":912,"height":440,"url":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/how-to-configure-code-signing-for-aws-lambda-jpg.webp","type":"image\/jpeg"}],"author":"Janki Mehta","twitter_card":"summary_large_image","twitter_image":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/how-to-configure-code-signing-for-aws-lambda-jpg.webp","twitter_creator":"@Sign_My_Code","twitter_site":"@Sign_My_Code","twitter_misc":{"Written by":"Janki Mehta","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda#article","isPartOf":{"@id":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda"},"author":{"name":"Janki Mehta","@id":"https:\/\/signmycode.com\/resources\/#\/schema\/person\/2e80276fd34fd5439c04cd3cb96a389f"},"headline":"How to Configure your Code Signing for AWS Lambda?","datePublished":"2023-08-01T07:37:37+00:00","dateModified":"2024-09-17T07:14:46+00:00","mainEntityOfPage":{"@id":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda"},"wordCount":1261,"publisher":{"@id":"https:\/\/signmycode.com\/resources\/#organization"},"image":{"@id":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda#primaryimage"},"thumbnailUrl":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/how-to-configure-code-signing-for-aws-lambda-jpg.webp","keywords":["aws Lambda Code Signing","Code signing for AWS Lambda","code signing for AWS Lambda function using AWS Signer","Configuring code signing for AWS Lambda","Lambda code signing"],"articleSection":["Code Signing Tutorials"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda","url":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda","name":"How to Configure Code Signing for AWS Lambda?","isPartOf":{"@id":"https:\/\/signmycode.com\/resources\/#website"},"primaryImageOfPage":{"@id":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda#primaryimage"},"image":{"@id":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda#primaryimage"},"thumbnailUrl":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/how-to-configure-code-signing-for-aws-lambda-jpg.webp","datePublished":"2023-08-01T07:37:37+00:00","dateModified":"2024-09-17T07:14:46+00:00","description":"Learn how to create AWS Lambda function from the AWS console, Creating code signing configurations, update, remove, enabling code signing for a function.","breadcrumb":{"@id":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda#primaryimage","url":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/how-to-configure-code-signing-for-aws-lambda-jpg.webp","contentUrl":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2023\/07\/how-to-configure-code-signing-for-aws-lambda-jpg.webp","width":912,"height":440,"caption":"Configure Code Signing for AWS Lambda"},{"@type":"BreadcrumbList","@id":"https:\/\/signmycode.com\/resources\/how-to-configure-your-code-signing-for-aws-lambda#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/signmycode.com\/resources\/"},{"@type":"ListItem","position":2,"name":"How to Configure your Code Signing for AWS Lambda?"}]},{"@type":"WebSite","@id":"https:\/\/signmycode.com\/resources\/#website","url":"https:\/\/signmycode.com\/resources\/","name":"SignMyCode - Resources","description":"","publisher":{"@id":"https:\/\/signmycode.com\/resources\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/signmycode.com\/resources\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/signmycode.com\/resources\/#organization","name":"SignMyCode","url":"https:\/\/signmycode.com\/resources\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/signmycode.com\/resources\/#\/schema\/logo\/image\/","url":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2021\/11\/logo1.png","contentUrl":"https:\/\/signmycode.com\/resources\/wp-content\/uploads\/2021\/11\/logo1.png","width":135,"height":86,"caption":"SignMyCode"},"image":{"@id":"https:\/\/signmycode.com\/resources\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Sign_My_Code"]},{"@type":"Person","@id":"https:\/\/signmycode.com\/resources\/#\/schema\/person\/2e80276fd34fd5439c04cd3cb96a389f","name":"Janki Mehta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/74a1328bbec77f3a65123c2396050e61b60fe3831478ceb96b55e5a0fe44e370?s=96&d=blank&r=g","caption":"Janki Mehta"},"description":"Janki Mehta is a Cyber-Security Enthusiast who constantly updates herself with new advancements in the Web\/Cyber Security niche. Along with theoretical knowledge, she also implements her practical expertise in day-to-day tasks and helps others to protect themselves from threats.","sameAs":["http:\/\/smcresources.ssltoolsonline.com"]}]}},"_links":{"self":[{"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/posts\/3220","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/comments?post=3220"}],"version-history":[{"count":8,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/posts\/3220\/revisions"}],"predecessor-version":[{"id":4079,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/posts\/3220\/revisions\/4079"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/media\/3231"}],"wp:attachment":[{"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/media?parent=3220"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/categories?post=3220"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/signmycode.com\/resources\/wp-json\/wp\/v2\/tags?post=3220"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}