For setups using a signing service or metadata configuration (e.g., AWS Signer), prepare a JSON or configuration file with the following:
{
"KeyId": "<KMS or CloudHSM Key ARN>",
"ProfileName": "<AWS Signer Profile Name>",
"Region": "us-west-2"
}