HashiCorp - Cloud Maturity Quiz

Are your teams using infrastructure as code (IaC) to provision cloud services?

Required

Not at allSome teams are using independentlyMany teams are using independentlyMany teams are using as a common shared service

How do you enforce governance and policy through code?

Required

We don’t use code for policy enforcementWe use code to enforce a few policiesWe use code to enforce many policies, but there are gapsVirtually all required policies are enforced through code

Do developers have self-service infrastructure provisioning options?

Required

We don't offer self-service infrastructure provisioningWe have decentralized (team-level) self-service provisioning processesWe have a centralized self-service process based on ticketing/approvals We have a centralized process that doesn't rely on ticketing/approvals

How centralized is your process for secrets management?

Required

No centralized process or consistent approach yetSome teams store and access secrets in cloud apps and infrastructureWe use multiple solutions across the org but lack centralized controlWe mainly use one solution to manage secrets across all environments

How often do you rotate your secrets?

Required

Less often than once a yearAt least once a year At least once a quarterAt least once a month

Do you dynamically create and manage just-in-time secrets?

Required

Not yetFor a few critical systems or appsFor many systems or appsWe primarily use dynamic secrets

How do you give developers access to critical systems without exposing credentials?

Required

We provide access through private networks but developers store sensitive credentials locallySome systems allow privileged access, but developers still handle credentialsCritical systems allow privileged access, and we hide some credentialsWe provide a passwordless experience and take a zero trust and/or least-privileged approach for critical system access

How are you managing non-human identities (machines, workloads, services, and agents) across your environments?

We don’t have a consistent approach, and many non-human identities still rely on long-lived or hard-coded credentials.Different teams manage them in different ways, often with cloud-native or point solutions and limited central visibility.We have a centralized approach for many environments, but some credentials are still static and lifecycle tasks like rotation and revocation are partly manual.We use a centralized, identity-based approach that issues short-lived credentials dynamically and automates policy, rotation, and revocation across environments.

Stage 00

You're currently in the stage — also known as . Next, we'll dive into your results and share resources to help you continue maturing in the cloud.But first, can you tell us a bit about yourself?

First Name

Required

Last Name

Required

Phone

Required

Business Email

Required

Company

Required

Country

Required

What’s the biggest thing slowing your cloud progress right now?

Required

By submitting this form, you acknowledge and agree that HashiCorp will process your personal information in accordance with the Privacy Policy.