Secrets Management
Centrally store, access, and distribute dynamic secrets such as tokens, passwords, certificates, and encryption keys
Introducing
Advanced Data Protection with Vault
Manage Secrets and Protect Sensitive Data
Secure, store and tightly control access to tokens, passwords, certificates, encryption keys for protecting secrets and other sensitive data using a UI, CLI, or HTTP API.
The shift to managing secrets and protecting data in dynamic infrastructure
Static Infrastructure
Datacenters with inherently high-trust networks with clear network perimeters.
»Traditional Approach
- High trust networks
- A clear network perimeter
- Security enforced by IP Address
Dynamic Infrastructure
Multiple clouds and private datacenters without a clear network perimeter.
»Vault Approach
- Low-trust networks in public clouds
- Unknown network perimeter across clouds
- Security enforced by Identity
How Vault Works
Vault tightly controls access to secrets and encryption keys by authenticating against trusted sources of identity such as Active Directory, LDAP, Kubernetes, CloudFoundry, and cloud platforms. Vault enables fine grained authorization of which users and applications are permitted access to secrets and keys.
Companies that trust Vault
Vault Principles
$ curl \
--header "X-Vault-Token: ..." \
--request POST \
--data @payload.json \
https://127.0.0.1:8200/v1/secret/config
API Driven
Enable automation and CI/CD use cases while enabling policy to codify, protect, and govern access to secrets.
Secure with any Identity
Leverage any trusted identity provider, such as cloud IAM platforms, Kubernetes, Active Directory, to authenticate into Vault. Identity is scale independent, unlike IP addresses, which require complex firewall rules and frequent updates.
Extend and Integrate
Request secrets for any system through one consistent, audited, and secured workflow. Vault supports public clouds and private datacenters, and a broad range of endpoint systems including databases, cloud platforms, messaging queues, SSH, and more.
Related Resources
6/4/2021 | WebinarZero Trust Security Roadshow
5/7/2021 | DemoHashiCorp Deep Dive Demos from Ignite and KubeCon Europe
4/17/2021 | PresentationHow Remote Work is Driving the Need for Multi-Cloud DevSecOps: How to Build a Pipeline
4/13/2021 | PresentationSecure Your Multi-Cloud Delivery Pipeline with HashiCorp Vault
