(Lambda): CodeSigningConfig UntrustedArtifactOnDeployment using incorrect string

[SimonJang]

The enum UntrustedArtifactOnDeployment provided from the @aws-cdk/aws-lambda is incorrect.

Reproduction Steps

// Create a Signing profile
const signingProfile = new SigningProfile(this, 'code-signing-profile', {
	  platform: Platform.AWS_LAMBDA_SHA384_ECDSA,
	  signatureValidity: Duration.days(365)
});

// Create the Code signing configuration for AWS Lambda
const codeSigningConfig = new CodeSigningConfig(this, 'code-signing-lambda-configuration', {
	  untrustedArtifactOnDeployment: UntrustedArtifactOnDeployment.WARN, // fails
	  signingProfiles: [signingProfile]
});

The error is in the @aws-cdk/aws-lambda package. enforce should be Enforce and warn Warn

export declare enum UntrustedArtifactOnDeployment {
    /**
     * Lambda blocks the deployment request if signature validation checks fail.
     *
     * @stability stable
     */
    ENFORCE = "enforce",
    /**
     * Lambda allows the deployment of the code package, but issues a warning.
     *
     * Lambda issues a new Amazon CloudWatch metric, called a signature validation error and also stores the warning in CloudTrail.
     *
     * @stability stable
     */
    WARN = "warn"
}

What did you expect to happen?

Should deploy since the enum UntrustedArtifactOnDeployment is used from the @aws-cdk/aws-lambda package.

What actually happened?

Model validation failed (#/CodeSigningPolicies/UntrustedArtifactOnDeployment: #: only 1 subschema matches out of 2)
#/CodeSigningPolicies/UntrustedArtifactOnDeployment: failed validation constraint for keyword [enum] (#/CodeSigningPolicies/UntrustedArtifactOnDeployment)

Environment

• CDK CLI Version : 1.93.0
• Framework Version: 1.93.0
• Node.js Version: v14.15.4
• OS : Ubuntu 18.04.3 LTS
• Language (Version): TypeScript

Other

The error is in the @aws-cdk/aws-lambda package. enforce should be Enforce and warn Warn

export declare enum UntrustedArtifactOnDeployment {
    /**
     * Lambda blocks the deployment request if signature validation checks fail.
     *
     * @stability stable
     */
    ENFORCE = "enforce",
    /**
     * Lambda allows the deployment of the code package, but issues a warning.
     *
     * Lambda issues a new Amazon CloudWatch metric, called a signature validation error and also stores the warning in CloudTrail.
     *
     * @stability stable
     */
    WARN = "warn"
}

Temporary workaround.

const codeSigningConfig = new CodeSigningConfig(this, 'code-signing-lambda-configuration', {
	  untrustedArtifactOnDeployment: 'Warn' as UntrustedArtifactOnDeployment.WARN,
	  signingProfiles: [signingProfile]
});

---

This is 🐛 Bug Report

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.