midl-dev / tezos-serverless-signer-apps

Serverless deployment of a Tezos Remote Signers on AWS

Tezos Serverless Signer Apps

In Beta - use at own risk.

A suite of Serverless apps to sign Tezos Operations on AWS.

These Serverless Apps are available in Amazon's Serverless Application Repository.

Install from the AWS Web console with just a few clicks. No instances, no command-line interface.

Useful Links

• How to switch your Tezos Baker to a Cloud KMS Setup.

List of Apps

	In-Memory Signer	Consensus KMS Signer
Purpose	Sign any operation, for example Tezos Baker Payout Operations	Sign Consensus Messages Only
Security	Medium 🟠	High 🟢
Key stored in	Amazon Secrets Manager	Amazon KMS
Key import/export	Yes	No
High Watermark Protection	No	Yes
Lines of code (including dependencies)	402,070 🟠	18,685 🟢
Tezos Supported Key Types	tz1, tz2, tz3, tz4	tz2 only
Go To Serverless App	Tezos In-Memory Signer ↗️	Tezos Consensus KMS Signer ↗️

A viable solution for Tezos Bakers

You may deploy a Tezos baker with:

• a Consensus KMS signer as consensus key
• an In-Memory Signer for payouts

This approach leverages the reliability and security of AWS for signing operations.

Meanwhile, you are free to set up the baker in another account, another region or on-prem.

See Guide: How to switch your Tezos Baker to a Cloud KMS Setup.

Read more on the Medium article introducing the project.

Brought to you by MIDL.dev

We can help you deploy and manage a complete Tezos baking operation. Hire us.