What is HashiCorp Vault
Secrets management platform
HashiCorp Vault is a tool for securely storing and managing secrets: API keys, passwords, certificates, and other sensitive data.
Key Features
- Secrets Storage — centralized secure storage
- Dynamic Secrets — generation of temporary credentials
- Encryption as a Service — data encryption without storing keys
- Secret Revocation — automatic expiration and revocation
- Audit — complete log of all operations
Authentication Methods
- Tokens
- LDAP / Active Directory
- Kubernetes
- AWS IAM
- GitHub / GitLab
Typical Use Cases
- Storing database passwords
- Generating temporary AWS credentials
- PKI infrastructure and certificates
- Application data encryption
- Secrets injection into CI/CD pipelines
Benefits
- Centralized secrets management
- Principle of least privilege
- Secret rotation without downtime
- Integration with Kubernetes and clouds