Identity & Access
HashiCorp Vault
Secrets management and dynamic credentials
About this program
Database passwords, API tokens and TLS keys live in Vault, are issued on demand and expire automatically. No credential is ever written into a stack file.
Features
- Dynamic, short-lived database credentials
- Encrypted at rest with automatic seal and unseal
- Audit log of every secret read
- Revocation in one call when a host is retired
Why we chose it
Because a stack file full of plaintext passwords is the failure mode we most often find in inherited systems. Vault makes the secure path the default one instead of an extra step.
Related programs
