Cyber Security· Important
AWS publishes end-to-end guide for quantum-resistant software signing
AWS released Part 1 of a two-part guide showing how to build a post-quantum software supply chain using ML-DSA signatures (NIST FIPS 204) across AWS KMS, AWS Private CA, and IAM Roles Anywhere. The guide covers signing binaries, container images, and SBOMs, and is positioned as the first full cloud-provider walkthrough for post-quantum signing, from root-of-trust creation to policy enforcement. It responds to upcoming mandates: the NSA's CNSA 2.0 requiring exclusive quantum-resistant signatures by 2030, and the EU Cyber Resilience Act taking full effect in December 2027.