Serverless Secrets with HashiCorp Vault
summary
Shows how to authenticate serverless functions to HashiCorp Vault and retrieve short‑lived credentials across AWS Lambda, Google Cloud Functions and Azure Functions using native cloud auth methods and Vault’s dynamic secrets. Demonstrates Python HVAC code that performs IAM/GCP JWT logins, an example TTL of 15 minutes, use of dynamic secrets for database creds, and the preview Vault Lambda extension that initializes before runtime and drops secrets into vault_secret.json for the function to consume.
AI-written summary · about
chapters (8)
- 0:00Introduction to Vault integration
- 3:33Why serverless with Vault
- 7:44Serverless authentication methods
- 10:13AWS Lambda integration demo
- 13:03Google Cloud Functions demo
- 17:36Simplifying with Lambda extension
- 21:11Best practices and summary
- 23:19Q&A on Vault challenges
related talks
22mSecuring AWS Accounts With HashiCorp Vault
40mA Better Way To Manage Secrets
30mSimplifying Secrets Management in the Public Cloud
29mHow to get dynamic with secrets management
28mSecret Management with Hashicorp´s Vault
29mUsing HashiCorp Vault with Google's Serverless Solutions
30mEfficiently share and manage secrets across applications with HashiCorp Vault
41mModern Security with Microservices and the Cloud