aws cloudformation deploy \
  --stack-name rtgs-signing-<participant> \
  --template-file signing-stack.yaml \
  --capabilities CAPABILITY_NAMED_IAM \
  --parameter-overrides \
    WalletSeed=<guid-seed> \
    AdminApiKey=<secret> \
    RtgsGlobalId=RTGS:B:GB98765432 \
    JurisdictionCode=euwsbx \
    EnvironmentName=sbx \
    AgentInvitation=<invitation-from-onboarding-email> \
    DidcommHostname=signing.example.com \
    CertificateArn=arn:aws:acm:<region>:<account>:certificate/<id>