Enabling AWS Code Signing

signer.tf

##############################################
# Code Signing Resources Option 1 & Option 2
#############################################
resource "aws_signer_signing_profile" "abc-signer-profile" {
  name_prefix = "abc_"
  platform_id = "AWSLambda-SHA384-ECDSA"

  tags = var.tags
}


resource "aws_lambda_code_signing_config" "abc-signer-profile-config" {
  allowed_publishers {
    signing_profile_version_arns = [aws_signer_signing_profile.abc-signer-profile.version_arn]
  }
  policies {
    untrusted_artifact_on_deployment = "Enforce"
  }
}