How do I store a private key the right way for aws lambda

[jonsmirl]

Have a look at what I did in this post.

Core encryption key management framework for serverless

I’ve started hacking this together… functions: KeysResource: role: digidevlambda handler: vapidkeys.handler resources: Resources: MyKeysResource: Type: Custom::MyKeysResource Properties: TriggerRun: "1" # increment this to force the VAPID Key generation function to run Stage: $<opt:stage, self:provider.stage> ServiceToken: 'Fn::GetAtt': [KeysResourceLambdaFunction, Arn] digidevlambda: Type: AWS::IAM::Role Propert…

I generated the keys on AWS and then stored then in SSM.