Add the AWS deployment assets required to run Vaultwarden serverlessly.
The stack runs Vaultwarden as a Lambda function behind CloudFront,
stores runtime data in S3, uses Aurora DSQL for the database, and sends
mail through SES when a sender address is configured.
Provide the SAM template, Cargo Lambda configuration, local and GitHub
Actions build flows, deployment helper, and deployment notes. Configure
the data bucket with versioning, SSE-KMS, Intelligent-Tiering, and
multipart cleanup. Grant the Lambda role the S3, DSQL, and SES
permissions required by the runtime.
Serve the web vault from a separate S3 origin behind CloudFront. Route
API, identity, admin, and attachment paths to the Lambda origin.
Preserve the CSP and response header policy required by web vault assets
and S3 presigned URL access.
Chase Douglas
9f256b932c