Skip to main content

Finalize candidate deployment

POST 
/v1/repositories/:organization/:repository/deployments/:deployment_id/finalize

Freeze a complete manifest and establish protection atomically. Newest successful generation gets durable latest-successful protection. An older late completion gets seven days of grace. Neither action approves or changes a catalog. Idempotent replay returns the original receipt; GET returns current protection and availability.

Authentication: AWS SigV4 (us-west-2, execute-api), using an authorized IAM role. Generated header examples do not compute a valid AWS signature.

Request​

Responses​

Candidate identity, immutable content when finalized, and current protection. An idempotent replay returns the original receipt.