

This is the new *Amazon CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [Amazon CloudFormation User Guide](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::ECR::SigningConfiguration Rule
<a name="aws-properties-ecr-signingconfiguration-rule"></a>

A signing rule that specifies a signing profile and optional repository filters. When an image is pushed to a matching repository, a signing job is created using the specified profile.

## Syntax
<a name="aws-properties-ecr-signingconfiguration-rule-syntax"></a>

To declare this entity in your Amazon CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-ecr-signingconfiguration-rule-syntax.json"></a>

```
{
  "[RepositoryFilters](#cfn-ecr-signingconfiguration-rule-repositoryfilters)" : {{[ RepositoryFilter, ... ]}},
  "[SigningProfileArn](#cfn-ecr-signingconfiguration-rule-signingprofilearn)" : {{String}}
}
```

### YAML
<a name="aws-properties-ecr-signingconfiguration-rule-syntax.yaml"></a>

```
  [RepositoryFilters](#cfn-ecr-signingconfiguration-rule-repositoryfilters): {{
    - RepositoryFilter}}
  [SigningProfileArn](#cfn-ecr-signingconfiguration-rule-signingprofilearn): {{String}}
```

## Properties
<a name="aws-properties-ecr-signingconfiguration-rule-properties"></a>

`RepositoryFilters`  <a name="cfn-ecr-signingconfiguration-rule-repositoryfilters"></a>
A list of repository filters that determine which repositories have their images signed on push. If no filters are specified, all images pushed to the registry are signed using the rule's signing profile. Maximum of 100 filters per rule.  
*Required*: No  
*Type*: Array of [RepositoryFilter](aws-properties-ecr-signingconfiguration-repositoryfilter.md)  
*Minimum*: `1`  
*Maximum*: `100`  
*Update requires*: [No interruption](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`SigningProfileArn`  <a name="cfn-ecr-signingconfiguration-rule-signingprofilearn"></a>
The ARN of the Amazon Signer signing profile to use for signing images that match this rule. For more information about signing profiles, see [Signing profiles](https://docs.amazonaws.cn/signer/latest/developerguide/signing-profiles.html) in the *Amazon Signer Developer Guide*.  
*Required*: Yes  
*Type*: String  
*Pattern*: `^arn:aws(-[a-z]+)*:signer:[a-z0-9-]+:[0-9]{12}:\/signing-profiles\/[a-zA-Z0-9_]{2,}$`  
*Maximum*: `200`  
*Update requires*: [No interruption](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)