diy-code-signing-kms-private-ca reviews and mentions

• Document Signing On Aws
  1 project | /r/aws | 5 Feb 2021

  Signature is invalid. Usually there's something wrong in the signing process. Like, the certificate you used wasn't derived from the same private key you used for signing. For this you can actually make use of AWS KMS to for singing and creating the self-signed certificate. You can also use AWS PCA to create certificates chain for the signing certificate. There's an AWS codesigning sample that might be helpful https://github.com/aws-samples/diy-code-signing-kms-private-ca

• How to generate x509 certificate from a AWS KMS's public key?
  1 project | /r/aws | 27 Jan 2021

  There's a sample here: https://github.com/aws-samples/diy-code-signing-kms-private-ca that does that, but you might need to modify it to make it fit your needs.