---
id: aws-cdk-aws-signer
version: "1.204.0"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# aws-cdk.aws-signer — The CDK Construct Library for AWS::Signer

License: permissive · Maintenance: active · Downloads: 151.3K/mo

## What it is and what it does

This package is an AWS CDK Construct Library module that wraps AWS Signer, a managed code-signing service. It lets you define signing profiles and platforms as infrastructure-as-code constructs, specifying signature formats, algorithms, and validity periods for code bundles. The library provides pre-defined signing platforms (AWS_LAMBDA_SHA384_ECDSA, AWS_IOT_DEVICE_MANAGEMENT_SHA256_ECDSA, AMAZON_FREE_RTOS_TI_CC3220SF, AMAZON_FREE_RTOS_DEFAULT) that you can instantiate and configure declaratively.

The package depends on aws-cdk.core, constructs, jsii, publication, and typeguard. It is part of AWS CDK v1, which has been end-of-support since 2023-06-01 and is no longer receiving updates. New projects should use AWS CDK v2 instead; existing v1 users can continue to use this package but will not receive bug fixes or new features.

Use it for:

- Define a signing profile for Lambda function code bundles with a specific signature algorithm and validity period.
- Set up code-signing infrastructure for IoT device management using predefined AWS Signer platforms.
- Declare signing templates as part of a larger CDK application to enforce code integrity across deployments.
- Configure FreeRTOS code-signing profiles for embedded systems using AWS Signer platforms.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Provides AWS CDK constructs for defining code-signing infrastructure and signing profiles using AWS Signer, enabling you to configure code-signing templates and platforms declaratively in Python.

No—not for new projects. This is AWS CDK v1, which reached end-of-support on 2023-06-01 and is no longer updated. AWS explicitly recommends migrating to AWS CDK v2. If you are already on CDK v1 and need signing constructs, this package is stable and has no known vulnerabilities, but you should plan a migration. For new work, use the v2 equivalent instead.

## Install

pip install aws-cdk-aws-signer
uv add aws-cdk-aws-signer
poetry add aws-cdk-aws-signer

## Installing aws-cdk.aws-signer

Before you install: Low install friction with a stable dependency tree. However, this is an AWS CDK v1 package that reached end-of-support on 2023-06-01 and is no longer being updated; AWS recommends migrating to AWS CDK v2 for ongoing support.

License in practice: Licensed under Apache-2.0 (permissive), allowing use in commercial and open-source projects with minimal restrictions.

Quickstart:

from aws_cdk import aws_signer as signer
from aws_cdk import core

class MyStack(core.Stack):
    def __init__(self, scope: core.Construct, id: str, **kwargs):
        super().__init__(scope, id, **kwargs)
        signing_profile = signer.SigningProfile(self, "SigningProfile",
            platform=signer.Platform.AWS_LAMBDA_SHA384_ECDSA
        )

AWS CDK v1 reached end-of-support on 2023-06-01 and is no longer updated; new projects should use AWS CDK v2.

Verify before relying:

- Whether existing v1 code can be mechanically migrated to v2 or requires substantial refactoring
- Performance or feature parity between v1 and v2 signing constructs

## Package facts

- License: Apache-2.0 (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 151.3K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

aws cdk code signing, aws signer constructs, cdk signing profile, aws code integrity, cdk infrastructure signing, signing platform cdk, aws lambda signing, aws-cdk, end-of-life, infrastructure-as-code

[View on SkillFed](https://skillfed.io/packages/aws-cdk-aws-signer) · [View on PyPI](https://pypi.org/project/aws-cdk-aws-signer/)