# Manual signing
<a name="image-signing-manual"></a>

Manual signing uses the Notation CLI and Amazon Signer plugin to sign images before pushing them to Amazon ECR. This method provides more control over the signing process and is useful when you need to sign images outside of the push workflow or require fine-grained control over signing operations.

For detailed instructions about signing container images using the Notation CLI and Amazon Signer, see [Sign container images in Signer](https://docs.amazonaws.cn/signer/latest/developerguide/container-workflow.html) and the related topics in the *Amazon Signer Developer Guide*.

## Prerequisites
<a name="image-signing-prerequisites"></a>

Before you begin, The following prerequisites must be met.
+ Install and configure the latest version of the Amazon CLI. For more information, see [Installing or updating the latest version of the Amazon CLI](https://docs.amazonaws.cn/cli/latest/userguide/getting-started-install.html) in the *Amazon Command Line Interface User Guide*.
+ Install the Notation CLI and the Amazon Signer plugin for Notation. For more information, see [Prerequisites for signing container images](https://docs.amazonaws.cn/signer/latest/developerguide/image-signing-prerequisites.html) in the *Amazon Signer Developer Guide*.
+ Have a container image stored in an Amazon ECR private repository to sign. For more information, see [Pushing an image to an Amazon ECR private repository](image-push.md).