SigningProfile

Source: src/AWS/Signer/SigningProfile.ts

An AWS Signer signing profile — a code-signing template (platform + signing material + signature validity) used to sign code, most commonly as the trust anchor for Lambda code signing configs.

PutSigningProfile is create-only in practice (re-putting an existing name fails with “Profile with name X already exists”), so every property except tags is immutable — changing one replaces the profile under a new generated name. On destroy the profile is canceled — AWS retains canceled profiles (the name stays reserved) and deletes them per its data-retention policy, so prefer generated names over fixed profileNames.

Creating a Signing Profile

Lambda Code-Signing Profile

const profile = yield* Signer.SigningProfile("release-profile", {
  platformId: "AWSLambda-SHA384-ECDSA",
});

Profile with Signature Validity Period

const profile = yield* Signer.SigningProfile("release-profile", {
  platformId: "AWSLambda-SHA384-ECDSA",
  signatureValidityPeriod: { value: 12, type: "MONTHS" },
  tags: { team: "platform" },
});