AWS::ECR::SigningConfiguration Rule - AWS CloudFormation

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::ECR::SigningConfiguration Rule

A signing rule that specifies a signing profile and optional repository filters. When an image is pushed to a matching repository, a signing job is created using the specified profile.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{ "RepositoryFilters" : [ RepositoryFilter, ... ], "SigningProfileArn" : String }

Properties

RepositoryFilters

A list of repository filters that determine which repositories have their images signed on push. If no filters are specified, all images pushed to the registry are signed using the rule's signing profile. Maximum of 100 filters per rule.

Required: No

Type: Array of RepositoryFilter

Minimum: 1

Maximum: 100

Update requires: No interruption

SigningProfileArn

The ARN of the AWS Signer signing profile to use for signing images that match this rule. For more information about signing profiles, see Signing profiles in the AWS Signer Developer Guide.

Required: Yes

Type: String

Pattern: ^arn:aws(-[a-z]+)*:signer:[a-z0-9-]+:[0-9]{12}:\/signing-profiles\/[a-zA-Z0-9_]{2,}$

Maximum: 200

Update requires: No interruption