Secrets Management with HashiCorp Vault
How to run HashiCorp Vault in production: auth and policies, static and dynamic secrets, encryption as a service, and the operational habits that keep a leaked credential from becoming an incident.
Secrets Management with HashiCorp Vault
How to run HashiCorp Vault in production: auth and policies, static and dynamic secrets, encryption as a service, and the operational habits that keep a leaked credential from becoming an incident.
What problem does Vault solve that a .env file or config secret does not?
Plaintext secrets sprawl everywhere: env vars, CI configs, git history, Slack messages. No one knows who holds them or when they last rotated. Vault gives you one place to store secrets behind auth and policy, an audit log of every read, and the ability to rotate or revoke a secret without redeploying every app. The bigger win is dynamic secrets. Instead of a long-lived database password sitting in a config, Vault hands each app a unique credential that expires in an hour. A leaked credential is useless an hour later.
More flashcard decks
API Design
Designing Rate Limiting for APIs
Token bucket, leaky bucket, fixed and sliding window algorithms, plus the patterns for building rate limiters that work in distributed systems without falling over.
20 minutes
GitOps
ArgoCD Fundamentals
Master GitOps principles and ArgoCD essentials including app deployment, sync policies, multi-cluster management, and security best practices.
20 minutes
FinOps
Cloud Cost Allocation Tags Across AWS, GCP, and Azure
Learn how to set up consistent cost allocation tagging strategies across multi-cloud environments for accurate chargeback and showback reporting.
20 minutes
Also worth your time on this topic
Docker Security Hardening Checklist
Comprehensive security checklist for hardening Docker containers, images, and runtime environments.
60-90 minutes
Secrets Management
How do you securely manage secrets (passwords, API keys, certificates) in a DevOps environment?
mid
Security Incident Response Quiz
Test your ability to detect, respond to, and mitigate security incidents including breaches, attacks, and vulnerabilities
20-25 minutes