- Home
- Code Signing Software
- AWS Signer
AWS Signer
What it is
AWS Signer is a managed code-signing service for verifying code integrity and publisher trust. It supports signing AWS Lambda deployment packages, code for supported IoT devices, and OCI container images using Notation. Lambda checks signatures and package integrity when signed code is deployed. For containers, Signer works with Notation in registries such as Amazon ECR and keeps signatures alongside images for verification. Administrators use AWS Identity and Access Management policies to control access to Signer resources and actions. Signing profiles can be managed in the console, through the AWS CLI, or with the API. Signer handles certificates and keys for Lambda and container image workflows; IoT workflows can use a code-signing certificate imported into AWS Certificate Manager. Documentation also lists links with AWS Certificate Manager and CloudTrail, plus Amazon EKS image verification. Notation CLI and Signer plugin installers are listed for Linux, macOS, and Windows. The plan is free when used with specified AWS services, although related service charges may apply. Lambda use may incur Amazon S3 storage charges for signed and unsigned objects.
For and against
For
- Signs Lambda packages, supported IoT code, and OCI images.
- Lambda verifies signatures and package integrity at deployment.
- Signing profiles can be managed through console, CLI, or API.
- Signer manages certificates and keys for Lambda and containers.
- Listed at no cost with specified services.
Against
- API actions have per-second account and Region quotas.
- AWS Signer has no minimum API request rate.
- Related service charges may apply.
- Lambda use may incur Amazon S3 storage charges.
The verdict
AWS Signer supports several AWS code-signing workflows and provides controls for managing signing access and profiles. The listed plan has no additional charge with specified services, but related service costs and API quotas are worth checking.
Who it suits
AWS Signer suits organizations that want to define trusted publishers for Lambda packages, IoT code, or container images. It may fit teams managing signing access through AWS IAM policies and profiles.
Plans and prices
AWS Signer usage with supported AWS services
Related service charges may apply · Lambda signing can incur Amazon S3 storage charges
Read 15 Oct 2026 · docs.aws.amazon.com
AWS Signer
Related service charges may apply · Lambda use may incur Amazon S3 storage charges for signed and unsigned objects
Read 4 Oct 2026 · docs.aws.amazon.com
On the record
- Access controls
- Administrators use AWS Identity and Access Management policies to control which users, groups, and roles can access Signer resources and actions.docs.aws.amazon.com · read 4 Oct 2026
- API quotas
- API actions have per-second quotas by AWS account and Region, and AWS Signer does not offer a minimum API request rate.docs.aws.amazon.com · read 4 Oct 2026
- API throttling
- Signer applies adjustable per-account, per-Region requests-per-second quotas and offers no minimum API request rate.docs.aws.amazon.com · read 15 Oct 2026
- AWS integrations
- Documented integrations include Amazon S3, Amazon CloudWatch, AWS CloudTrail, AWS Certificate Manager, ECR, EKS, Lambda, IoT Device Management and FreeRTOS.docs.aws.amazon.com · read 15 Oct 2026
- AWS launch
- AWS says it launched Amazon Web Services in spring 2006.aws.amazon.com · read 4 Oct 2026
- Certificate management
- Signer manages signing certificates and keys for Lambda and container image workflows; IoT workflows can use a code-signing certificate imported into AWS Certificate Manager.docs.aws.amazon.com · read 4 Oct 2026
- CLI and documentation
- AWS publishes a Developer Guide, API Reference and AWS CLI reference for Signer.docs.aws.amazon.com · read 15 Oct 2026
- Company founding and size
- LinkedIn lists AWS as founded in 2006 with more than 10,001 employees.linkedin.com · read 15 Oct 2026
- Company identity
- Amazon Web Services is listed as a public IT services and consulting company headquartered in Seattle, Washington.linkedin.com · read 15 Oct 2026
- Container-image announcement
- AWS announced ECR and EKS container-image signing with Signer on June 6, 2023, including key rotation, audit logs and revocation.aws.amazon.com · read 15 Oct 2026
- Container integration
- Signer works with Notation to sign container images in registries such as Amazon ECR, with signatures stored alongside images for verification.docs.aws.amazon.com · read 4 Oct 2026
- Container signing
- Signer works with the Notation CLI to sign OCI images in registries such as Amazon ECR, storing signatures alongside images.docs.aws.amazon.com · read 15 Oct 2026
- Cross-account signing
- Cross-account signing is supported for Lambda and container-registry platforms, with profile owners granting permissions to other accounts.docs.aws.amazon.com · read 15 Oct 2026
- Download platforms
- The Notation CLI and Signer plugin installers are listed for Linux, macOS, and Microsoft Windows.docs.aws.amazon.com · read 4 Oct 2026
- EKS verification
- Amazon EKS and self-managed Kubernetes clusters can verify ownership and integrity of signed container images during deployment.docs.aws.amazon.com · read 15 Oct 2026
- Installer contents
- Installers bundle Notation, the Signer plugin, trust stores and root certificates, configurable trust policy and license files.docs.aws.amazon.com · read 15 Oct 2026
- Installer requirements
- The Notation and Signer plugin installers support Linux RPM/Debian on x86_64 and arm64, macOS on x86_64 and arm64, and Windows x86_64.docs.aws.amazon.com · read 15 Oct 2026
- IoT signing
- It signs firmware for supported IoT devices, including Amazon FreeRTOS and AWS IoT Device Management, using a certificate imported into AWS Certificate Manager.docs.aws.amazon.com · read 15 Oct 2026
