What is the process to Signing a AMI ?

Question

I am trying to figure out  how to sign a AMI image, so that it can be verified that its not tampered with  before creating EC2 instance from the AMI.

Answer

AMI binary content (i.e. the disk content) is immutable, so once the AMI is created then that content can't be changed: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/modify-ami.html

A limited set of attributes of an AMI can be changed after it is created - see the API docs for [ModifyImageAttribute](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyImageAttribute.html) for details.

What is the process to Signing a AMI ?

Conteúdo relevante