Modern Security with Microservices and the Cloud

on YouTube ↗41m

" summary

Vault provides secrets-as-a-service with concrete outcomes: a KV store for static secrets, an encryption transit engine used as a centralized encrypt/decrypt service, and dynamic secrets that create real database or cloud service accounts on demand with short leases. Demoed behavior includes a 1 minute TTL demo that auto-deletes DB users, audit logging of every request, and recommended deployment on GKE with GCS/S3 backends and automated unseal via cloud KMS for high availability.

AI-written summary · about

" chapters (9)

1. 0:00Intro
2. 8:23Key Value Store
3. 10:35Microservices Stack
4. 13:00Transit Engine
5. 15:43Vault
6. 20:58Demo
7. 27:31Policies
8. 32:55Running Vault
9. 33:26Storage

" related talks

• 31mModern Security With Microservices And The CloudSeth Vargo · DevOpsDays Silicon Valley 2018
• 31mModern Security with Microservices and the CloudSeth Vargo · ScaleConf Colombia 2018
• 51mIntroduction to VaultSeth Vargo · GOTO London 2015
• 47mManaging your Secrets in a Cloud EnvironmentTaswar Bhatti · Update Conference Prague 2018
• 30mSimplifying Secrets Management in the Public CloudKevin Tuffner · HashiTalks 2019
• 31mVault and Secret Management in KubernetesArmon Dadgar · KubeCon + CloudNativeCon North America 2017
• 34mWhich Vault? Don't tell me your secret(s)!Michel Schildmeijer · Porto Tech Hub Conference 2024
• 44mSecret Management with Hashicorp's VaultDaniel Bornkessel · DevFest Nantes 2018