Zero Trust RabbitMQ with HashiCorp Vault
summary
Shows a working demo that uses HashiCorp Vault (configured with Terraform) to broker RabbitMQ identities and to perform encryption; a Go producer and consumer fetch ephemeral credentials from Vault, producer encrypts messages with Vault’s encryption-as-a-service key, consumer decrypts, and leases/ revocation work (demo uses a 768-hour lease example). Vault roles/policies restrict actions (producer can only encrypt, consumer only decrypt). Claims feasibility; performance ranges cited (customers report 50k–200k req/s with tuning).
AI-written summary · about
chapters (14)
- 0:00Zero Trust and HashiCorp Vault intro
- 2:31Zero Trust core principles
- 11:42Why Zero Trust for RabbitMQ
- 15:37Vault beyond Secrets
- 18:47Demo: Vault + RabbitMQ setup
- 21:15RabbitMQ config for Vault
- 22:40Vault roles for RabbitMQ
- 23:45Vault policies for apps
- 25:32Short-lived RabbitMQ credentials
- 27:38Vault creds in applications
- 30:28Encrypting data with Vault
- 33:18Securing RabbitMQ messages
- 36:04Decrypting messages
- 37:26Summary and performance
related talks
30mSecuring RabbitMQ with Vault
42mZero Trust security with HashiCorp Vault and AWS (PRT239)
40mA Better Way To Manage Secrets
46mVault configuration as code via HashiCorp Terraform - Stories from trenches
28mSecret Management with Hashicorp´s Vault
31mModern Security with Microservices and the Cloud
44mSecret Management with Hashicorp's Vault
27mTGI Vault: Securing Kafka with Vault PKI