RevokeSigningProfile

Source: src/AWS/Signer/RevokeSigningProfile.ts

Runtime binding for signer:RevokeSigningProfile.

Revokes a version of the bound SigningProfile, permanently invalidating every signature that version produced on or after effectiveTime — the incident-response lever when signing material is compromised. Revocation is irreversible. The profile name is injected from the binding; pass the profileVersion to revoke. Provide the implementation with Effect.provide(AWS.Signer.RevokeSigningProfileHttp).

Revoking Signatures

// init — bind the operation to the profile
const revokeSigningProfile = yield* AWS.Signer.RevokeSigningProfile(profile);

// runtime — invalidate everything the version signed from now on
yield* revokeSigningProfile({
  profileVersion,
  reason: "signing key compromised",
  effectiveTime: new Date(),
});