BWS AWS lane retirement audit (2026-08-18)¶

Retired LASTVET_AWS_{STAGING,PROD}_* secrets from Bitwarden Secrets Manager after R940 cutover.

Prerequisite (learned): Every runtime key must exist under LASTVET_R940_{STAGING,PROD}_* before deleting the AWS lane. As of 2026-08-18, only ~18 R940 keys existed per lane; the restore script previously merged AWS + R940. Deleting AWS secrets before completing R940 migration dropped staging restore to 20 keys until emergency merge from on-disk prod env + R940 overrides.

R940 production uses LASTVET_R940_* only; restore script no longer reads the AWS prefix lane.

Deleted: 82 secrets Timestamp (UTC): 2026-08-19T00:02:18Z

BWS key	Secret ID
`LASTVET_AWS_PROD_ALLOW_LEGACY_HEADER_AUTH`	`35de4aa4-df4e-4d93-8532-b4a20128aa61`
`LASTVET_AWS_PROD_APP_SECRET`	`3e4b8a6b-20d3-408b-a3cb-b480012c5d4a`
`LASTVET_AWS_PROD_CORS_ORIGIN`	`953c60cc-3688-4147-b851-b4a20128ac6c`
`LASTVET_AWS_PROD_DATABASE_APP_URL`	`0af102c7-1fed-40d2-9217-b4a201486165`
`LASTVET_AWS_PROD_GOOGLE_OAUTH_CLIENT_ID`	`6563afe3-097c-4a04-9084-b4a20128ae4a`
`LASTVET_AWS_PROD_GOOGLE_OAUTH_CLIENT_SECRET`	`6baef616-7901-48eb-9b76-b4a20128b047`
`LASTVET_AWS_PROD_GOOGLE_OAUTH_REDIRECT_URI_PROVIDER`	`c7affdc2-a280-4efb-a55b-b4a20128b20e`
`LASTVET_AWS_PROD_INTERNAL_ADMIN_SECRET`	`008c1303-3530-4bad-af68-b480012c5b42`
`LASTVET_AWS_PROD_LAST1_ID_API_BASE`	`b3c5982b-5781-419b-97d1-b4a20128b400`
`LASTVET_AWS_PROD_LAST1_ID_OAUTH_CLIENT_ID`	`0234f931-2923-4477-b1b7-b4a20128b620`
`LASTVET_AWS_PROD_LAST1_ID_OAUTH_REDIRECT_URI_ONSET`	`fc672111-d194-45cc-8df2-b4a20128b905`
`LASTVET_AWS_PROD_LAST1_ID_OAUTH_REDIRECT_URI_PROVIDER`	`5db2fc18-9dc9-47df-8f63-b4a20128baee`
`LASTVET_AWS_PROD_LAST1_PROOF_DRAINER_SECRET`	`3d2cc7a1-6ebd-41c4-a9c5-b480012c5a98`
`LASTVET_AWS_PROD_LAST1_TOKEN_ENCRYPTION_KEY`	`b3bc8fa3-a929-4953-bad7-b4a20128c031`
`LASTVET_AWS_PROD_LAST1_WEBHOOK_SECRET`	`22c5652f-e10a-40d8-af5f-b480012c58fc`
`LASTVET_AWS_PROD_LASTVET_APP_SECRET`	`3c2fc241-bf4f-4f33-a359-b4a20128c3e8`
`LASTVET_AWS_PROD_LASTVET_INTERNAL_ADMIN_SECRET`	`c7c9916c-5b78-4a3b-8149-b4a20128c5d6`
`LASTVET_AWS_PROD_OAUTH_ISSUER`	`188561b8-15ed-4832-8423-b4a20128c7bb`
`LASTVET_AWS_PROD_OAUTH_JWT_SECRET`	`ed66b6dc-43d6-46e4-b4ee-b480012c56c8`
`LASTVET_AWS_PROD_ONSET_IDENTITY_ASSERTION_SECRET`	`f2de88db-0d6d-48da-9233-b4a20128cd55`
`LASTVET_AWS_PROD_PROVIDER_JWT_SECRET`	`1069beec-323d-45ec-afe1-b480012c5852`
`LASTVET_AWS_PROD_PROVIDER_PORTAL_URL`	`ab1fa646-15b3-4b08-bd9f-b4a20128d0fb`
`LASTVET_AWS_PROD_SECURE_LINK_HMAC_SECRET`	`17c5e66d-be4a-42d4-a1f4-b49100428ed4`
`LASTVET_AWS_PROD_SENDGRID_API_KEY`	`18b42d38-1214-4b2d-b461-b4a20128d308`
`LASTVET_AWS_PROD_SENDGRID_FROM_EMAIL`	`3cc8a1ca-345a-4552-aab3-b4a20128d4f8`
`LASTVET_AWS_PROD_SENDGRID_PROVIDER_MFA_TEMPLATE_ID`	`36a9f4e6-2f66-49f5-b11d-b4a20128d6df`
`LASTVET_AWS_PROD_SENDGRID_PROVIDER_PASSWORD_RESET_TEMPLATE_ID`	`f09b020b-c627-4771-abce-b4a20128d8c1`
`LASTVET_AWS_PROD_SENDGRID_PROVIDER_VERIFICATION_TEMPLATE_ID`	`6a369877-4bfd-4b3c-b8ac-b4a20128daa0`
`LASTVET_AWS_PROD_STRIPE_PRICE_NETWORK`	`1d520ed8-e125-4103-91bc-b4a20128dc91`
`LASTVET_AWS_PROD_STRIPE_PRICE_PRACTICE`	`8057dcf3-74e1-4564-8b66-b4a20128dee3`
`LASTVET_AWS_PROD_STRIPE_PRICE_PRO`	`f3d903f3-3e37-4372-8da5-b4a20128e8a5`
`LASTVET_AWS_PROD_STRIPE_PUBLISHABLE_KEY`	`71955d80-6cf5-44c7-b042-b4a20128ea8f`
`LASTVET_AWS_PROD_STRIPE_SECRET_KEY`	`b92dd014-52d2-44ab-b02c-b4a20128ec87`
`LASTVET_AWS_PROD_STRIPE_WEBHOOK_SECRET`	`ff4acc70-7cdb-4e67-abea-b4a20128ee87`
`LASTVET_AWS_PROD_VETERAN_JWT_SECRET`	`5c6e1c54-c04c-4d86-9329-b480012c5610`
`LASTVET_AWS_PROD_VETERAN_SESSION_EXCHANGE_SECRET`	`5697e30b-a41e-43af-abc9-b4a20128f072`
`LASTVET_AWS_PROD_WAITLIST_ADMIN_EMAILS`	`c95142ce-225e-4078-915d-b4a20128f5aa`
`LASTVET_AWS_PROD_WAITLIST_CAN_SPAM_POSTAL_ADDRESS`	`28e633ca-3ddb-4f59-b68c-b4a20128f7f1`
`LASTVET_AWS_PROD_WAITLIST_SITE_BASE_URL`	`1e7e7918-db8b-4779-9ae9-b4a20128fb05`
`LASTVET_AWS_RYAN_WORKER_ACCESS_KEY_ID`	`c2c5f544-c405-4a6c-982f-b4a201259cff`
`LASTVET_AWS_RYAN_WORKER_ACCESS_SECRET`	`2fbc6e1e-5bcf-484d-af6b-b4a20125eab5`
`LASTVET_AWS_STAGING_ALLOW_HEADER_AUTH`	`3553988f-a6d8-4f6a-988d-b4a20128a86e`
`LASTVET_AWS_STAGING_ALLOW_LEGACY_HEADER_AUTH`	`f63efbbb-3263-4eb3-aab2-b4a20128a95b`
`LASTVET_AWS_STAGING_CORS_ORIGIN`	`f4ca58ba-4b9d-4881-8b80-b4a20128ab5f`
`LASTVET_AWS_STAGING_DATABASE_APP_URL`	`b8ec2217-9e44-4928-8607-b4a20148611d`
`LASTVET_AWS_STAGING_GOOGLE_OAUTH_CLIENT_ID`	`167cc50e-11e1-40c0-9d86-b4a20128ad5d`
`LASTVET_AWS_STAGING_GOOGLE_OAUTH_CLIENT_SECRET`	`84f9ebe0-6f27-4acf-8ec5-b4a20128af3a`
`LASTVET_AWS_STAGING_GOOGLE_OAUTH_REDIRECT_URI_PROVIDER`	`2d6a0e78-0ab6-432e-9e39-b4a20128b122`
`LASTVET_AWS_STAGING_LAST1_ID_API_BASE`	`5ef86159-de8f-4093-b2fd-b4a20128b308`
`LASTVET_AWS_STAGING_LAST1_ID_OAUTH_CLIENT_ID`	`34a591d1-ec64-4d8f-a8fe-b4a20128b4eb`
`LASTVET_AWS_STAGING_LAST1_ID_OAUTH_EXPECTED_AUDIENCE`	`7876e1ad-9a92-4307-86e3-b4a20128b717`
`LASTVET_AWS_STAGING_LAST1_ID_OAUTH_REDIRECT_URI_ONSET`	`68ddd6a4-cc72-4322-9b24-b4a20128b818`
`LASTVET_AWS_STAGING_LAST1_ID_OAUTH_REDIRECT_URI_PROVIDER`	`8ee64967-c2b5-44a4-bdca-b4a20128b9ff`
`LASTVET_AWS_STAGING_LAST1_PROOF_DRAINER_ENABLED`	`d835e8f1-7100-404b-9dac-b4a20128bbef`
`LASTVET_AWS_STAGING_LAST1_PROOF_DRAINER_SECRET`	`ce9845b8-a1c2-4f20-b123-b4a20128bceb`
`LASTVET_AWS_STAGING_LAST1_TOKEN_ENCRYPTION_KEY`	`edd530d8-a93f-484f-ab8d-b4a20128bf2f`
`LASTVET_AWS_STAGING_LAST1_WEBHOOK_SECRET`	`c80be381-ed07-4e60-9b9d-b4a20128c16d`
`LASTVET_AWS_STAGING_LASTVET_APP_SECRET`	`fd70aa77-bba7-4cbd-90dc-b4a20128c2f4`
`LASTVET_AWS_STAGING_LASTVET_INTERNAL_ADMIN_SECRET`	`0ad7d10c-6518-4c54-a38b-b4a20128c4e3`
`LASTVET_AWS_STAGING_OAUTH_ISSUER`	`578a57b9-2007-4352-9e41-b4a20128c6dd`
`LASTVET_AWS_STAGING_OAUTH_JWT_SECRET`	`d06a3512-13fa-47a9-9faf-b4a20128ca91`
`LASTVET_AWS_STAGING_ONSET_IDENTITY_ASSERTION_SECRET`	`339d25c1-dde0-46e4-ad52-b4a20128cc68`
`LASTVET_AWS_STAGING_PROVIDER_JWT_SECRET`	`16cd1838-a4c6-4c16-983e-b4a20128ce54`
`LASTVET_AWS_STAGING_PROVIDER_PORTAL_URL`	`0fe9ed6e-5f20-40cd-8e9a-b4a20128d004`
`LASTVET_AWS_STAGING_SECURE_LINK_HMAC_SECRET`	`04dd40f9-8f5c-4c15-9bd0-b4a20128f322`
`LASTVET_AWS_STAGING_SENDGRID_API_KEY`	`c8420445-65cb-4044-892b-b4a20128d1fe`
`LASTVET_AWS_STAGING_SENDGRID_FROM_EMAIL`	`bb44b835-3c8b-4528-8769-b4a20128d403`
`LASTVET_AWS_STAGING_SENDGRID_PROVIDER_MFA_TEMPLATE_ID`	`8a130556-15b6-4f8a-b848-b4a20128d5eb`
`LASTVET_AWS_STAGING_SENDGRID_PROVIDER_PASSWORD_RESET_TEMPLATE_ID`	`45180f54-6236-4715-a8f5-b4a20128d7dd`
`LASTVET_AWS_STAGING_SENDGRID_PROVIDER_VERIFICATION_TEMPLATE_ID`	`b9f3fedc-18b6-4ca6-9a45-b4a20128d9ac`
`LASTVET_AWS_STAGING_STRIPE_PRICE_NETWORK`	`421ffc07-13a4-4dd1-8c46-b4a20128db97`
`LASTVET_AWS_STAGING_STRIPE_PRICE_PRACTICE`	`a57e2e4c-701c-47da-990e-b4a20128ddc9`
`LASTVET_AWS_STAGING_STRIPE_PRICE_PRO`	`cf62dbab-8fa8-4d90-979a-b4a20128e024`
`LASTVET_AWS_STAGING_STRIPE_PUBLISHABLE_KEY`	`5ee99e57-380b-4db2-bfb0-b4a20128e9a0`
`LASTVET_AWS_STAGING_STRIPE_SECRET_KEY`	`03082cf5-34c6-41bf-b8e0-b4a20128eb97`
`LASTVET_AWS_STAGING_STRIPE_WEBHOOK_SECRET`	`d518efbf-e0bb-4a88-86b8-b4a20128ed93`
`LASTVET_AWS_STAGING_VETERAN_JWT_SECRET`	`c3b82950-0c3e-4067-b62a-b4a20128f169`
`LASTVET_AWS_STAGING_VETERAN_SESSION_EXCHANGE_SECRET`	`5e49614b-663e-4d13-bd92-b4a20128ef7e`
`LASTVET_AWS_STAGING_WAITLIST_ADMIN_EMAILS`	`4f245b96-76c7-4c0c-ade1-b4a20128f4af`
`LASTVET_AWS_STAGING_WAITLIST_CAN_SPAM_POSTAL_ADDRESS`	`0c64b506-8714-4480-8bf6-b4a20128f6af`
`LASTVET_AWS_STAGING_WAITLIST_EXTRA_ALLOWED_ORIGINS`	`03946480-391a-48e7-9e0c-b4a20128f8e7`
`LASTVET_AWS_STAGING_WAITLIST_SITE_BASE_URL`	`2639ad1a-a7f5-42f3-af11-b4a20128fa0f`