resource "aws_lambda_code_signing_config" "new_csc" {

  allowed_publishers {
    signing_profile_version_arns = ["aws_signer_signing_profile.example1.arn", "aws_signer_signing_profile.example2.arn"]
  }
  description = "My awesome code signing config."

  policies {
    untrusted_artifact_on_deployment = "Warn"
  }
}