Improving HashiCorp Vault Security with Data Visualization
summary
Shows a working pipeline that pulls Vault metadata, Active Directory memberships, Git commits and Splunk audit logs into Neo4j graph database to visualize who really accesses secrets and which policies enable that access. Demonstrates mapping of Vault policies mapped to AD groups and dynamic DB roles to users, plus a policy change impact visualization that diffs v1/v2 policy effects. Code examples and live queries prove the approach and surface unintended delete or broad-read privileges.
AI-written summary · about
chapters (9)
- 0:00Introduction and challenges
- 1:12Defining security questions
- 5:14The role of graph databases
- 7:57Visualizing secrets access
- 12:10Policy and access mapping
- 15:03Dynamic credential analysis
- 17:14Aggregating system data
- 20:02Advanced integration use cases
- 22:56Policy impact visualization
related talks
40mA Better Way To Manage Secrets
29mIntro to secrets management using Vault
27mWho's managing the credential for your data infrastructure?
28mSecret Management with Hashicorp´s Vault
24mDeveloper-First Application Security and DevSecOps
28mOur Journey Into Secrets Management With Vault
27mManaging VMware Environments with HashiCorp Vault
20mAzure Authentication With Vault