Documentation
README
Ensure that Code Signing is enabled for Lambda functions
Description
Ensure that all your Amazon Lambda functions are configured to use the Code Signing feature in order to restrict the deployment of unverified code.
Rationale
Code Signing, ensures that the function code is signed by an approved (trusted) source, and that it has not been altered since signing, and that the code signature has not expired or been revoked.
Impact
Enabling code signing adds an additional step to the deployment process. All code packages must be signed before deployment, which may slow down CI/CD pipelines.
Audit Procedure
Using AWS Console
This is the opening of the README. Read the full README on GitHub.