Introduction to Vault
summary
Vault presents a concrete secret-management system: an HTTP API with first-class clients that issues dynamic secrets (per-host Postgres users that auto-expire and can be revoked), provides transit encryption like a KMS for encrypt/decrypt with online key rotation, and uses AES-256-GCM with enforced TLS 1.2. It supports backends (Consul, Postgres, file, in-memory, Zookeeper), PKI issuance, auditing, lease renewal and revoke-tree operations, N-of-M Shamir unseal for root keys, and HA when backed by a leader‑election storage.
AI-written summary · about
chapters (8)
- 0:00Start
- 4:37ASHLEY MADISON
- 7:37WHY NOT CONFIG MANAGEMENT?
- 10:53WHY NOT (ONLINE) DATABASES?
- 11:42HOW TO HANDLE SECRET SPRAWL?
- 14:04VAULT GOALS
- 16:08VAULT FEATURES
- 19:14SECURE SECRET STORAGE
related talks
44mSecret Management with Hashicorp's Vault
43mSecret Management with Hashicorp's Vault
41mHiding secrets in a Vault
28mSecret Management with Hashicorp´s Vault
41mModern Security with Microservices and the Cloud
29mIntro to secrets management using Vault
31mVault and Secret Management in Kubernetes
34mWhich Vault? Don't tell me your secret(s)!