SigningJob

class SigningJob : KotlinCustomResource

Creates a Signer Signing Job.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const testSp = new aws.signer.SigningProfile("test_sp", {platformId: "AWSLambda-SHA384-ECDSA"});
const buildSigningJob = new aws.signer.SigningJob("build_signing_job", {
profileName: testSp.name,
source: {
s3: {
bucket: "s3-bucket-name",
key: "object-to-be-signed.zip",
version: "jADjFYYYEXAMPLETszPjOmCMFDzd9dN1",
},
},
destination: {
s3: {
bucket: "s3-bucket-name",
prefix: "signed/",
},
},
ignoreSigningJobFailure: true,
});
import pulumi
import pulumi_aws as aws
test_sp = aws.signer.SigningProfile("test_sp", platform_id="AWSLambda-SHA384-ECDSA")
build_signing_job = aws.signer.SigningJob("build_signing_job",
profile_name=test_sp.name,
source={
"s3": {
"bucket": "s3-bucket-name",
"key": "object-to-be-signed.zip",
"version": "jADjFYYYEXAMPLETszPjOmCMFDzd9dN1",
},
},
destination={
"s3": {
"bucket": "s3-bucket-name",
"prefix": "signed/",
},
},
ignore_signing_job_failure=True)
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var testSp = new Aws.Signer.SigningProfile("test_sp", new()
{
PlatformId = "AWSLambda-SHA384-ECDSA",
});
var buildSigningJob = new Aws.Signer.SigningJob("build_signing_job", new()
{
ProfileName = testSp.Name,
Source = new Aws.Signer.Inputs.SigningJobSourceArgs
{
S3 = new Aws.Signer.Inputs.SigningJobSourceS3Args
{
Bucket = "s3-bucket-name",
Key = "object-to-be-signed.zip",
Version = "jADjFYYYEXAMPLETszPjOmCMFDzd9dN1",
},
},
Destination = new Aws.Signer.Inputs.SigningJobDestinationArgs
{
S3 = new Aws.Signer.Inputs.SigningJobDestinationS3Args
{
Bucket = "s3-bucket-name",
Prefix = "signed/",
},
},
IgnoreSigningJobFailure = true,
});
});
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/signer"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
testSp, err := signer.NewSigningProfile(ctx, "test_sp", &signer.SigningProfileArgs{
PlatformId: pulumi.String("AWSLambda-SHA384-ECDSA"),
})
if err != nil {
return err
}
_, err = signer.NewSigningJob(ctx, "build_signing_job", &signer.SigningJobArgs{
ProfileName: testSp.Name,
Source: &signer.SigningJobSourceArgs{
S3: &signer.SigningJobSourceS3Args{
Bucket: pulumi.String("s3-bucket-name"),
Key: pulumi.String("object-to-be-signed.zip"),
Version: pulumi.String("jADjFYYYEXAMPLETszPjOmCMFDzd9dN1"),
},
},
Destination: &signer.SigningJobDestinationArgs{
S3: &signer.SigningJobDestinationS3Args{
Bucket: pulumi.String("s3-bucket-name"),
Prefix: pulumi.String("signed/"),
},
},
IgnoreSigningJobFailure: pulumi.Bool(true),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.signer.SigningProfile;
import com.pulumi.aws.signer.SigningProfileArgs;
import com.pulumi.aws.signer.SigningJob;
import com.pulumi.aws.signer.SigningJobArgs;
import com.pulumi.aws.signer.inputs.SigningJobSourceArgs;
import com.pulumi.aws.signer.inputs.SigningJobSourceS3Args;
import com.pulumi.aws.signer.inputs.SigningJobDestinationArgs;
import com.pulumi.aws.signer.inputs.SigningJobDestinationS3Args;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var testSp = new SigningProfile("testSp", SigningProfileArgs.builder()
.platformId("AWSLambda-SHA384-ECDSA")
.build());
var buildSigningJob = new SigningJob("buildSigningJob", SigningJobArgs.builder()
.profileName(testSp.name())
.source(SigningJobSourceArgs.builder()
.s3(SigningJobSourceS3Args.builder()
.bucket("s3-bucket-name")
.key("object-to-be-signed.zip")
.version("jADjFYYYEXAMPLETszPjOmCMFDzd9dN1")
.build())
.build())
.destination(SigningJobDestinationArgs.builder()
.s3(SigningJobDestinationS3Args.builder()
.bucket("s3-bucket-name")
.prefix("signed/")
.build())
.build())
.ignoreSigningJobFailure(true)
.build());
}
}
resources:
testSp:
type: aws:signer:SigningProfile
name: test_sp
properties:
platformId: AWSLambda-SHA384-ECDSA
buildSigningJob:
type: aws:signer:SigningJob
name: build_signing_job
properties:
profileName: ${testSp.name}
source:
s3:
bucket: s3-bucket-name
key: object-to-be-signed.zip
version: jADjFYYYEXAMPLETszPjOmCMFDzd9dN1
destination:
s3:
bucket: s3-bucket-name
prefix: signed/
ignoreSigningJobFailure: true

Import

Using pulumi import, import Signer signing jobs using the job_id. For example:

$ pulumi import aws:signer/signingJob:SigningJob test_signer_signing_job 9ed7e5c3-b8d4-4da0-8459-44e0b068f7ee

Properties

Link copied to clipboard
val completedAt: Output<String>

Date and time in RFC3339 format that the signing job was completed.

Link copied to clipboard
val createdAt: Output<String>

Date and time in RFC3339 format that the signing job was created.

Link copied to clipboard

The S3 bucket in which to save your signed object. See Destination below for details.

Link copied to clipboard
val id: Output<String>
Link copied to clipboard

Set this argument to true to ignore signing job failures and retrieve failed status and reason. Default false.

Link copied to clipboard
val jobId: Output<String>

The ID of the signing job on output.

Link copied to clipboard
val jobInvoker: Output<String>

The IAM entity that initiated the signing job.

Link copied to clipboard
val jobOwner: Output<String>

The AWS account ID of the job owner.

Link copied to clipboard

A human-readable name for the signing platform associated with the signing job.

Link copied to clipboard
val platformId: Output<String>

The platform to which your signed code image will be distributed.

Link copied to clipboard
val profileName: Output<String>

The name of the profile to initiate the signing operation.

Link copied to clipboard
val profileVersion: Output<String>

The version of the signing profile used to initiate the signing job.

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val requestedBy: Output<String>

The IAM principal that requested the signing job.

Link copied to clipboard

A revocation record if the signature generated by the signing job has been revoked. Contains a timestamp and the ID of the IAM entity that revoked the signature.

Link copied to clipboard

The time when the signature of a signing job expires.

Link copied to clipboard

Name of the S3 bucket where the signed code image is saved by code signing.

Link copied to clipboard

The S3 bucket that contains the object to sign. See Source below for details.

Link copied to clipboard
val status: Output<String>

Status of the signing job.

Link copied to clipboard
val statusReason: Output<String>

String value that contains the status reason.

Link copied to clipboard
val urn: Output<String>