Prerequisites
- Node.js 20+
- pnpm
- AWS Credentials (with access to DynamoDB and Secrets Manager in a dev/sandbox account)
Installation
- Clone the repository:
- Install dependencies:
- Configure environment variables:
Create a
.envfile or export these variables:
- Run in development mode:
Architecture
The Vault is stateless and relies on:- DynamoDB: For transaction logs, delegate metadata, and rate limiting.
- Secrets Manager: For Stripe API keys and HMAC signing secrets.
- KMS: For field-level encryption of sensitive data.