GetRevocationStatus

Source: src/AWS/Signer/GetRevocationStatus.ts

Runtime binding for signer:GetRevocationStatus.

Checks whether a signature’s signing profile version, signing job, or signing certificates have been revoked — the verification-time complement to RevokeSignature / RevokeSigningProfile, served from Signer’s regional verification (data-) endpoint. Account-level operation — the entities checked are chosen per request at runtime, so the binding takes no resource argument. Provide the implementation with Effect.provide(AWS.Signer.GetRevocationStatusHttp).

Revoking Signatures

// init — account-level binding, no resource argument
const getRevocationStatus = yield* AWS.Signer.GetRevocationStatus();

// runtime
const { revokedEntities } = yield* getRevocationStatus({
  signatureTimestamp: signedAt,
  platformId: "Notation-OCI-SHA384-ECDSA",
  profileVersionArn,
  jobArn,
  certificateHashes,
});
const trusted = (revokedEntities ?? []).length === 0;