What is the process to Signing a AMI ?

Question

I am trying to figure out  how to sign a AMI image, so that it can be verified that its not tampered with  before creating EC2 instance from the AMI.

James_S · Answer

AMI binary content (i.e. the disk content) is immutable, so once the AMI is created then that content can't be changed: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/modify-ami.html

A limited set of attributes of an AMI can be changed after it is created - see the API docs for [ModifyImageAttribute](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyImageAttribute.html) for details.

What is the process to Signing a AMI ?

Conteúdo relevante