Metadata-Version: 2.4
Name: lambdavault
Version: 0.1.0
Summary: HashiCorp Vault on AWS Lambda + S3 + KMS, ≈ $0 when idle. The vault CLI, hvac and the Terraform vault provider talk to it unchanged; this package is the helper: status, output.
Author: Frank Zhang
License: MIT
Project-URL: Homepage, https://github.com/cloudformer/lambdavault
Project-URL: Repository, https://github.com/cloudformer/lambdavault
Project-URL: Deploy, https://github.com/cloudformer/lambdavault#quick-start
Project-URL: Compatibility, https://github.com/cloudformer/lambdavault/blob/main/tests/compat/REPORT.md
Project-URL: Changelog, https://github.com/cloudformer/lambdavault/blob/main/CHANGELOG.md
Project-URL: Issues, https://github.com/cloudformer/lambdavault/issues
Keywords: serverless,aws,lambda,vault,hashicorp-vault,secrets,kms
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: MIT License
Classifier: Programming Language :: Python :: 3
Classifier: Topic :: Security
Requires-Python: >=3.9
Description-Content-Type: text/markdown

# lambdavault

**HashiCorp Vault, truly serverless: the official Vault binary on AWS Lambda, data in S3, auto-unseal by KMS,
≈ $1 a month when idle.** Part of [Redefine AWS Serverless](https://github.com/topics/redefine-aws-serverless).

![lambdavault architecture](https://raw.githubusercontent.com/cloudformer/lambdavault/main/docs/architecture.svg)

The vault CLI, hvac and the Terraform vault provider are the clients — unchanged, only `VAULT_ADDR` points at
the Lambda. This package is the helper around a deployment:

```bash
pip install lambdavault
lambdavault status    # initialized / sealed / version / latency (address from terraform output)
eval "$(lambdavault output)"   # export VAULT_ADDR for the vault CLI
vault operator init -recovery-shares=1 -recovery-threshold=1   # once
vault kv get kvv2/app
```

Deploy the server from the [main repository](https://github.com/cloudformer/lambdavault) with Terraform.
Compatibility with a normal Vault: [REPORT.md](https://github.com/cloudformer/lambdavault/blob/main/tests/compat/REPORT.md).
