AWS Signer
7.1#3 in code signing softwareFree planFree planWebAPILinuxmacOS
VisitAWS Signer vs OpenPubkey
OpenPubkey
6.6#5 in code signing softwareFree planFree planAPILinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | AWS Signer | OpenPubkey |
|---|---|---|
| Purpose | AWS Signer is a fully managed code-signing service that helps verify code integrity and publisher trust. | OpenPubkey binds user or workload identities to public keys through OpenID Connect, allowing identities to sign messages or artifacts. |
AWS Signer plans
- AWS SignerFree
- AWS Signer usage with supported AWS servicesFree
OpenPubkey plans
- OpenPubkeyFree
Pick AWS Signer if…
It suits organizations signing Lambda packages, supported IoT code, or container images that need publisher and integrity verification. AWS describes Lambda signing as a way to define trusted publishers and let authorized developers create certified code packages.
Pick OpenPubkey if…
It suits developers and teams who want user or workload identities to sign messages or artifacts using OIDC-based identity. Workload use requires GQ signatures, and public PK Tokens can disclose identity claims.