aws-cdk-lib.aws_ecr.CfnSigningConfiguration.RuleProperty

RuleProperty Struct

A signing rule that specifies a signing profile and optional repository filters.

When an image is pushed to a matching repository, a signing job is created using the specified profile.

Source

Generated code

Type last changed

v2.230.0 · 26 Nov 2025

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_ecr as ecr } from 'aws-cdk-lib';
const ruleProperty: ecr.CfnSigningConfiguration.RuleProperty = {
  signingProfileArn: 'signingProfileArn',

  // the properties below are optional
  repositoryFilters: [{
    filter: 'filter',
    filterType: 'filterType',
  }],
};

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk import aws_ecr as ecr

rule_property = ecr.CfnSigningConfiguration.RuleProperty(
    signing_profile_arn="signingProfileArn",

    # the properties below are optional
    repository_filters=[ecr.CfnSigningConfiguration.RepositoryFilterProperty(
        filter="filter",
        filter_type="filterType"
    )]
)

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import software.amazon.awscdk.services.ecr.*;

RuleProperty ruleProperty = RuleProperty.builder()
        .signingProfileArn("signingProfileArn")

        // the properties below are optional
        .repositoryFilters(List.of(RepositoryFilterProperty.builder()
                .filter("filter")
                .filterType("filterType")
                .build()))
        .build();

// Install: dotnet add package Amazon.CDK.Lib
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.ECR;

var ruleProperty = new RuleProperty {
    SigningProfileArn = "signingProfileArn",

    // the properties below are optional
    RepositoryFilters = new [] { new RepositoryFilterProperty {
        Filter = "filter",
        FilterType = "filterType"
    } }
};

// Install: go get github.com/aws/aws-cdk-go/awscdk/v2
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import "github.com/aws/aws-cdk-go/awscdk"

ruleProperty := &RuleProperty{
	SigningProfileArn: jsii.String("signingProfileArn"),

	// the properties below are optional
	RepositoryFilters: []interface{}{
		&RepositoryFilterProperty{
			Filter: jsii.String("filter"),
			FilterType: jsii.String("filterType"),
		},
	},
}

Properties

repositoryFilters?optionalIResolvable | IResolvable | CfnSigningConfiguration.RepositoryFilterProperty[]repository_filters?optionaltyping.Union[IResolvable, typing.List[typing.Union[IResolvable, RepositoryFilterProperty]]]repositoryFilters?optionalIResolvableRepositoryFilters?optionalIResolvableRepositoryFilters?optionalinterface{}#

A list of repository filters that determine which repositories have their images signed on push.

If no filters are specified, all images pushed to the registry are signed using the rule's signing profile. Maximum of 100 filters per rule.

signingProfileArnstringsigning_profile_arnstrsigningProfileArnStringSigningProfileArnstringSigningProfileArn*stringrequired#

The ARN of the AWS Signer signing profile to use for signing images that match this rule.

For more information about signing profiles, see Signing profiles in the AWS Signer Developer Guide .