AWS Signer is a fully managed code-signing service to ensure the trust and integrity of code. The code is validated against a digital signature to ensure the authenticity of the code. Code signing is an effective security measure that helps us determine that the code or files are not tampered with and that the resources are from a trusted source. In this Cloud Lab, you’ll explore the AWS Signer service and the features associated with it.
You’ll start by creating an S3 bucket, which will be used to store signed and unsigned resources. Then, you’ll create a signing profile, which will be used to sign all the required resources. After that, you’ll explore how AWS Signer is used to sign Lambda functions and Lambda layers. You’ll also learn how you can deploy signed functions and how they are different from unsigned Lambda functions.
After completing this Cloud Lab, you will be able to configure AWS signing profiles, signing jobs, signed Lambda functions, and signed Lambda layers. At the end of this Cloud Lab, your architecture will look like this:
