# RuleProperty

A signing rule that specifies a signing profile and optional repository filters.

When an image is pushed to a matching repository, a signing job is created using the specified profile.

- Source: Generated code
- Type last changed: v2.230.0 · 26 Nov 2025

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_ecr as ecr } from 'aws-cdk-lib';
const ruleProperty: ecr.CfnSigningConfiguration.RuleProperty = {
  signingProfileArn: 'signingProfileArn',

  // the properties below are optional
  repositoryFilters: [{
    filter: 'filter',
    filterType: 'filterType',
  }],
};
```

## Properties

- `repositoryFilters`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnSigningConfiguration.RepositoryFilterProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_ecr.CfnSigningConfiguration.RepositoryFilterProperty.html)[] — A list of repository filters that determine which repositories have their images signed on push.

  If no filters are specified, all images pushed to the registry are signed using the rule's signing profile. Maximum of 100 filters per rule.

- `signingProfileArn`: string (required) — The ARN of the AWS Signer signing profile to use for signing images that match this rule.

  For more information about signing profiles, see [Signing profiles](https://docs.aws.amazon.com/signer/latest/developerguide/signing-profiles.html) in the *AWS Signer Developer Guide* .