realized i forgot to add the lockfile. will update before landing

setting @bartek as blocking since he left the original feedback

now that we supply platform details as metadata, should we be sending the device type in the key upload at all? seems like we should just remove it? cc @bartek

address feedback

In D12831#363248, @bartek wrote:

Accepting, but I noticed one more thing that needs to be considered.
Scan operation doesn't always return all items. It has response limit of 1MB. If it's exceeded, the response contains LastEvaluatedKey property, from which we should start a subsequent scan.

On the other hand, this table is relatively small (1k items, ~60kB) so it's far from the limit. And it's not expected to grow, so we could ignore the issue as well

AWS Docs: https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_Scan.html

env var should be string

abandoning in favor of D12819 and D12820

commandeer

bartek is afk so i'm going to commandeer and land