aws-cdk.aws-signer

What it is and what it does

This package is an AWS CDK Construct Library module that wraps AWS Signer, a managed code-signing service. It lets you define signing profiles and platforms as infrastructure-as-code constructs, specifying signature formats, algorithms, and validity periods for code bundles. The library provides pre-defined signing platforms (AWS_LAMBDA_SHA384_ECDSA, AWS_IOT_DEVICE_MANAGEMENT_SHA256_ECDSA, AMAZON_FREE_RTOS_TI_CC3220SF, AMAZON_FREE_RTOS_DEFAULT) that you can instantiate and configure declaratively.

The package depends on aws-cdk.core, constructs, jsii, publication, and typeguard. It is part of AWS CDK v1, which has been end-of-support since 2023-06-01 and is no longer receiving updates. New projects should use AWS CDK v2 instead; existing v1 users can continue to use this package but will not receive bug fixes or new features.

Use it for:

• Define a signing profile for Lambda function code bundles with a specific signature algorithm and validity period.
• Set up code-signing infrastructure for IoT device management using predefined AWS Signer platforms.
• Declare signing templates as part of a larger CDK application to enforce code integrity across deployments.
• Configure FreeRTOS code-signing profiles for embedded systems using AWS Signer platforms.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Provides AWS CDK constructs for defining code-signing infrastructure and signing profiles using AWS Signer, enabling you to configure code-signing templates and platforms declaratively in Python.

No—not for new projects. This is AWS CDK v1, which reached end-of-support on 2023-06-01 and is no longer updated. AWS explicitly recommends migrating to AWS CDK v2. If you are already on CDK v1 and need signing constructs, this package is stable and has no known vulnerabilities, but you should plan a migration. For new work, use the v2 equivalent instead.

Install

aws-cdk-aws-signer on PyPI

pip install aws-cdk-aws-signer

uv add aws-cdk-aws-signer

poetry add aws-cdk-aws-signer

Installing aws-cdk.aws-signer

Before you install

Low install friction with a stable dependency tree. However, this is an AWS CDK v1 package that reached end-of-support on 2023-06-01 and is no longer being updated; AWS recommends migrating to AWS CDK v2 for ongoing support.

License in practice

Licensed under Apache-2.0 (permissive), allowing use in commercial and open-source projects with minimal restrictions.

Quickstart

from aws_cdk import aws_signer as signer
from aws_cdk import core

class MyStack(core.Stack):
    def __init__(self, scope: core.Construct, id: str, **kwargs):
        super().__init__(scope, id, **kwargs)
        signing_profile = signer.SigningProfile(self, "SigningProfile",
            platform=signer.Platform.AWS_LAMBDA_SHA384_ECDSA
        )

AWS CDK v1 reached end-of-support on 2023-06-01 and is no longer updated; new projects should use AWS CDK v2.

Verify before relying

• Whether existing v1 code can be mechanically migrated to v2 or requires substantial refactoring
• Performance or feature parity between v1 and v2 signing constructs

Package facts

Evidence: aws_cdk.aws_signer-1.204.0-py3-none-any.whl

Tags

More Build Tools packages