The signing key: an id, ARN or alias. Prefer the alias — it survives a key replacement without a config change everywhere.
Optional
The signing key: an id, ARN or alias. Prefer the alias — it survives a key replacement without a config change everywhere.