This repository contains CloudFormation templates for storing KeePass databases.
This template is for the KeeAnywhere plugin.
One S3 bucket will be created.
- All public access to the bucket is intentionally blocked.
- Default AES256 encrypt-at-rest is enabled.
The bucket has a bucket policy attached to it. The policy enforces any access to the bucket uses SSL/HTTPS. This prevents plaintext HTTP access and ensures all transport (in and out) is encrypted.
One IAM user will be created.
- Access to the S3 bucket is permitted per the IAM policy at https://keeanywhere.de/use/faq
- Open the CloudFormation management console in your desired region.
- Create a new CloudFormation stack, using
keeanywhere-storage.yaml
as the template file. - When the stack is complete, make note of the following from the stack's
Outputs
:- The S3 bucket created
- The IAM user
- Navigate to the created IAM user and create an access key & secret pair. Copy/Paste the pair into KeeAnywhere.
- Start Loading and saving your KeePass databases to the created bucket.
You should rotate your access keys regularly (for example, every 30 days).
If you need to create a second user to access the same bucket, simply copy & paste the entire KeePassUser1
resource as a new resource (eg. KeePassUser2
) and update your existing stack.