Signing CloudFormation templates by creating a sha256 hash of the file, encrypted with the user's private key and stored in a base64 form in the CloudFormation template Metadata section.