Secrets at Scale with Vault and Waypoint
summary
Automates creation of HCP Vault Secrets app namespaces and HCP projects using Waypoint templates and Terraform no-code modules, producing service principals, variable sets and workspaces on demand. Demonstrates static, auto-rotating and dynamic AWS creds with secret sync to cloud stores (AWS Secrets Manager, Azure Key Vault, Terraform Cloud variables), supports up to 50 versions and two active versions for rotation, exposes audit logs to Splunk/DataDog/CloudWatch, and the demos run end-to-end.
AI-written summary · about
chapters (8)
- 0:00Introduction to secrets management
- 3:54Using Vault Secrets and Waypoint
- 7:26Platform engineering approach
- 12:23Application team onboarding
- 17:44Auto-rotating and dynamic secrets
- 19:28Secret sync to cloud services
- 21:33Audit logging and access controls
- 22:57Summary and key takeaways
related talks
12mCentralize and manage secrets with HashiCorp Cloud
38mKeeping Secrets - A Practical Approach to Managing Credentials
30mSimplifying Secrets Management in the Public Cloud
42mHCP Vault Learn Lab: Operations with Terraform
31mSecure Your Multi-Cloud Delivery Pipeline with HashiCorp Vault
28mOur Journey Into Secrets Management With Vault
24mSecrets as Code
28mHow to Store Secrets—and When Do You Need Them—in HashiCorp Vault