ef-cms
ef-cms copied to clipboard
SI-7 Verify deployment integrity of deployed lambdas
Is your feature request related to a problem? Please describe. Ensure that when a lamdba is deployed that it is verified to help us be confident in the system ingretity as described in SI-7
Describe the solution you'd like a lot of different ways this could be met.
Describe alternatives you've considered This is likely partially covered by the notion of state in terraform, but we would want to somehow verify that the deployed version of our system is what we would expect and that the integrity has not been compromised in deployment or over the course of the life of the lambda.
Additional context Add any other context or screenshots about the feature request here.
AWS recently announced Code Signing, a trust and integrity control for AWS Lambda , with an accompanying blog post describing it in detail.
This is also now supported in Terraform.