# AWS Signer API

> AWS Signer API on Apizie: 19 endpoints (Lists the cross-account permissions associated with a signing profile., Adds cross-account permissions to a signing profile., Returns information on a specific signing profile., Creates a signing profile. A signing profile is a code signing template that can be used to carry out a…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:amazonaws-signer/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-signer`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://zieapi.vercel.app/api/cloud/amazonaws-signer
- OpenAPI: https://zieapi.vercel.app/api/cloud/amazonaws-signer/openapi.json

AWS Signer is a fully managed code signing service to help you ensure the trust and integrity of your code. AWS Signer supports the following applications: With code signing for AWS Lambda, you can sign AWS Lambda…

## Endpoints

### Lists the cross-account permissions associated with a signing profile.
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-signer/list-profile-permissions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileName | string | yes | Name of the signing profile containing the cross-account permissions. |
| nextToken | string | no | String for specifying the next set of paginated results. |

### Adds cross-account permissions to a signing profile.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-signer/add-profile-permission` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileName | string | yes | The human-readable name of the signing profile. |
| body | object | yes | JSON request body |

### Returns information on a specific signing profile.
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-signer/get-signing-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileName | string | yes | The name of the target signing profile. |
| profileOwner | string | no | The AWS account ID of the profile owner. |

### Creates a signing profile. A signing profile is a code signing template that can be used to carry out a…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-signer/put-signing-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileName | string | yes | The name of the signing profile to be created. |
| body | object | yes | JSON request body |

### Changes the state of an ACTIVE signing profile to CANCELED . A canceled profile is still viewable with the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-signer/cancel-signing-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileName | string | yes | The name of the signing profile to be canceled. |

### Returns information about a specific code signing job. You specify the job by using the jobId value that is…
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-signer/describe-signing-job` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| jobId | string | yes | The ID of the signing job on input. |

### Retrieves the revocation status of one or more of the signing profile, signing job, and signing certificate.
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-signer/get-revocation-status` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| signatureTimestamp | string | yes | The timestamp of the signature that validates the profile or job. |
| platformId | string | yes | The ID of a signing platform. |
| profileVersionArn | string | yes | The version of a signing profile. |
| jobArn | string | yes | The ARN of a signing job. |
| certificateHashes | array | yes | A list of composite signed hashes that identify certificates. A certificate identifier consists of a subject certificate TBS hash (signed… |

### Returns information on a specific signing platform.
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-signer/get-signing-platform` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| platformId | string | yes | The ID of the target signing platform. |

### Lists all your signing jobs. You can use the maxResults parameter to limit the number of signing jobs that…
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-signer/list-signing-jobs` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| status | string | no | A status value with which to filter your results. |
| platformId | string | no | The ID of microcontroller platform that you specified for the distribution of your code image. |
| requestedBy | string | no | The IAM principal that requested the signing job. |
| maxResults | integer | no | Specifies the maximum number of items to return in the response. Use this parameter when paginating results. If additional items exist… |
| nextToken | string | no | String for specifying the next set of paginated results to return. After you receive a response with truncated results, use this parameter… |
| isRevoked | boolean | no | Filters results to return only signing jobs with revoked signatures. |
| signatureExpiresBefore | string | no | Filters results to return only signing jobs with signatures expiring before a specified timestamp. |
| signatureExpiresAfter | string | no | Filters results to return only signing jobs with signatures expiring after a specified timestamp. |
| jobInvoker | string | no | Filters results to return only signing jobs initiated by a specified IAM entity. |

### Initiates a signing job to be performed on the code provided. Signing jobs are viewable by the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-signer/start-signing-job` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Lists all signing platforms available in code signing that match the request parameters. If additional jobs…
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-signer/list-signing-platforms` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| category | string | no | The category type of a signing platform. |
| partner | string | no | Any partner entities connected to a signing platform. |
| target | string | no | The validation template that is used by the target signing platform. |
| maxResults | integer | no | The maximum number of results to be returned by this operation. |
| nextToken | string | no | Value for specifying the next set of paginated results to return. After you receive a response with truncated results, use this parameter… |

### Lists all available signing profiles in your AWS account. Returns only profiles with an ACTIVE status unless…
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-signer/list-signing-profiles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| includeCanceled | boolean | no | Designates whether to include profiles with the status of CANCELED . |
| maxResults | integer | no | The maximum number of profiles to be returned. |
| nextToken | string | no | Value for specifying the next set of paginated results to return. After you receive a response with truncated results, use this parameter… |
| platformId | string | no | Filters results to return only signing jobs initiated for a specified signing platform. |
| statuses | array | no | Filters results to return only signing jobs with statuses in the specified list. |

### Returns a list of the tags associated with a signing profile resource.
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-signer/list-tags-for-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The Amazon Resource Name (ARN) for the signing profile. |

### Adds one or more tags to a signing profile. Tags are labels that you can use to identify and organize your…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-signer/tag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The Amazon Resource Name (ARN) for the signing profile. |
| body | object | yes | JSON request body |

### Removes cross-account permissions from a signing profile.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-signer/remove-profile-permission` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileName | string | yes | A human-readable name for the signing profile with permissions to be removed. |
| revisionId | string | yes | An identifier for the current revision of the signing profile permissions. |
| statementId | string | yes | A unique identifier for the cross-account permissions statement. |

### Changes the state of a signing job to REVOKED. This indicates that the signature is no longer valid.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-signer/revoke-signature` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| jobId | string | yes | ID of the signing job to be revoked. |
| body | object | yes | JSON request body |

### Changes the state of a signing profile to REVOKED. This indicates that signatures generated using the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-signer/revoke-signing-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileName | string | yes | The name of the signing profile to be revoked. |
| body | object | yes | JSON request body |

### Signs a binary payload and returns a signature envelope.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-signer/sign-payload` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Removes one or more tags from a signing profile. To remove the tags, specify a list of tag keys.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-signer/untag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The Amazon Resource Name (ARN) for the signing profile. |
| tagKeys | array | yes | A list of tag keys to be removed from the signing profile. |

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:amazonaws-signer/list-profile-permissions" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the AWS Signer API?
Create a free Apizie key, then send GET https://zieapi.vercel.app/v1/cloud:amazonaws-signer/list-profile-permissions with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the AWS Signer API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. AWS Signer itself also needs your own key from amazonaws.com.

### Can AI agents use the AWS Signer API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-signer.

### What is the status of the AWS Signer API?
Needs your own provider key (bring your own key)