How to get dynamic with secrets management
summary
Claims that HashiCorp Vault plus Vault Secrets automates replacing long‑lived keys with auto-rotated AWS access keys (two active versions, 30‑day default, on‑demand rotate) and can issue dynamic per‑run short‑lived credentials (TTL in minutes/hours) for S3 and GCP that applications and Terraform use. Demo shows a Go app and Terraform runs successfully grabbing generated creds, accessing an S3 object, and recording events in an audit log. Cites cost drivers: $4.88M average breach cost and 500 secrets ≈ $500k/year to manage as rationale.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:33Secret risks and cost
- 4:11Inverted pyramid
- 10:15Hashi products
- 14:30Auto rotation
- 16:37Demo
- 19:53Dynamic Secrets
- 22:45Terraform
- 25:17Summary
related talks
44mSecret Management with Hashicorp's Vault
43mSecret Management with Hashicorp's Vault
38mKeeping Secrets - A Practical Approach to Managing Credentials
22mSecuring AWS Accounts With HashiCorp Vault
30mSimplifying Secrets Management in the Public Cloud
31mHashiCorp Vault Configuration as Code via HashiCorp Terraform: Stories From the Trenches
40mA Better Way To Manage Secrets
41mChanging Applications for Changing Secrets