Add the AWS deployment assets needed to run Vaultwarden serverlessly from
this branch. The stack runs Vaultwarden as a Lambda function behind
CloudFront, stores runtime data in S3, uses Aurora DSQL for the database,
and sends mail through SES when a sender address is configured.
Provide the SAM template, Cargo Lambda configuration, local and GitHub
Actions build flows, deployment helper, and deployment notes. Configure
the data bucket for versioning, SSE-KMS, Intelligent-Tiering, and
multipart cleanup, and grant the Lambda role the S3, DSQL, and SES
permissions required by the runtime.
Serve the web vault from a separate S3 origin behind CloudFront and route
API, identity, admin, and attachment paths to the Lambda origin. Preserve
the CSP and response header policy needed for web vault assets and S3
presigned URL access.
Chase Douglas
bd12af6e86