In Beta - use at own risk.
A suite of Serverless apps to sign Tezos Operations on AWS.
These Serverless Apps are available in Amazon's Serverless Application Repository.
Install from the AWS Web console with just a few clicks. No instances, no command-line interface.
| In-Memory Signer | Consensus KMS Signer | |
|---|---|---|
| Purpose | Sign any operation, for example Tezos Baker Payout Operations | Sign Consensus Messages Only |
| Security | Medium 🟠 | High 🟢 |
| Key stored in | Amazon Secrets Manager | Amazon KMS |
| Key import/export | Yes | No |
| High Watermark Protection | No | Yes |
| Lines of code (including dependencies) | 402,070 🟠 | 18,685 🟢 |
| Tezos Supported Key Types | tz1, tz2, tz3, tz4 |
tz2 only |
| Go To Serverless App | Tezos In-Memory Signer |
Tezos Consensus KMS Signer |
You may deploy a Tezos baker with:
- a Consensus KMS signer as consensus key
- an In-Memory Signer for payouts
This approach leverages the reliability and security of AWS for signing operations.
Meanwhile, you are free to set up the baker in another account, another region or on-prem.
See Guide: How to switch your Tezos Baker to a Cloud KMS Setup.
Read more on the Medium article introducing the project.
We can help you deploy and manage a complete Tezos baking operation. Hire us.