AWS Signer
Code and image signing
A managed code-signing service that ensures code hasn't been tampered with: signs Lambda deployment packages (code signing), container images, and IoT firmware, with certificate lifecycle managed by AWS.
- Cost$ Low
- Difficulty●●●●●
- Costs money when idle?No
- Serverless
- In examsDVA
Think of it asLike a tamper-evident seal: once opened, you know whether the goods were swapped.
When to use it
✓ Use it when
You need to ensure only approved code is deployed to Lambda/containers.
✗ Avoid it when
TLS certificates for websites → Certificate Manager.
Common uses
- Lambda runs only signed code
- Sign container images in a pipeline
- Sign OTA firmware updates for IoT
What does it cost?
- Pricing model: Lambda and container signing are free; some other signing types are charged per signing.
