AWS Signer
7.1#3 in code signing softwareFree planFree planWebAPILinuxmacOS
VisitAWS Signer vs SignPath
What both publish
| Fact | AWS Signer | SignPath |
|---|---|---|
| Access controls | Administrators use AWS Identity and Access Management policies to control which users, groups, and roles can access Signer resources and actions. | Role-based access controls define who can sign which artifacts, when, and with which certificate. |
| Container signing | Signer works with the Notation CLI to sign OCI images in registries such as Amazon ECR, storing signatures alongside images. | Container images can be signed through Notation, Cosign, GPG or the REST API, with OCI layout and registry workflows documented. |
| Purpose | AWS Signer is a fully managed code-signing service that helps verify code integrity and publisher trust. | SignPath provides code signing and software integrity tools that enforce policies across software builds and releases. |
AWS Signer plans
- AWS SignerFree
- AWS Signer usage with supported AWS servicesFree
SignPath plans
- Open Source Code SigningFree
- Code GovernancePriced on request
- Software Integrity PlatformPriced on request
Pick AWS Signer if…
It suits organizations signing Lambda packages, supported IoT code, or container images that need publisher and integrity verification. AWS describes Lambda signing as a way to define trusted publishers and let authorized developers create certified code packages.
Pick SignPath if…
SignPath suits development teams that need controls around signing and verifying software releases. Its free option is for qualifying open source projects; deployment choices also include self-hosted and hybrid.