Secrets Management

12 items tagged with "secrets-management"

Filter by type:

Best Practices1

Secrets Management Best Practices

Practices for storing, rotating, and accessing credentials and keys securely, keeping them out of source code and limiting their exposure.

Anti-Patterns2

Anti-Pattern

Hardcoded Secrets

Embedding API keys, passwords, or tokens directly in source code, where they leak through version control, logs, and shared binaries.

Anti-Pattern

Long-Lived Static Credentials

Using permanent API keys and access tokens that never expire and are rarely rotated, maximizing the value and lifespan of any leak.

Blueprints2

Blueprint

Secrets in Config to HashiCorp Vault Blueprint

Move plaintext secrets out of config files and environment variables into HashiCorp Vault with dynamic secrets, leasing, and rotation.

Blueprint

Static Secrets to Cloud Secrets Manager Blueprint

Migrate hard-coded and static secrets to a managed cloud secrets manager with IAM-scoped access, versioning, and automatic rotation.

Products1

Product

HashiCorp Vault

Secrets management and data protection

Reference Architectures1

Reference Architecture

Centralized Secrets Management Platform

HashiCorp Vault-based platform for issuing, rotating, and auditing secrets and short-lived credentials across hybrid environments.

Playbooks1

Playbook

Secrets Management Program Playbook

A program to eliminate hardcoded secrets and adopt centralized, rotated, least-privilege secret storage with dynamic and short-lived credentials.

Stacks1

Stack

Vault + Consul

A HashiCorp infrastructure stack pairing Vault for secrets management and dynamic credentials with Consul for service discovery, configuration, and service mesh.

Comparisons2

Comparison

Vault vs AWS Secrets Manager

HashiCorp Vault is a powerful, cloud-agnostic secrets and identity platform; AWS Secrets Manager is a managed, AWS-native secrets store. Power and portability versus simplicity.

Comparison

HashiCorp Vault vs Cloud Secrets Manager

Vault is a powerful, cloud-agnostic secrets and identity platform; cloud-native secrets managers are simpler, fully managed services tied to one cloud.

FAQs1

FAQ

What is a secret manager?

A secret manager is a dedicated service that securely stores, controls access to, and audits sensitive credentials such as API keys, database password...