Download to read offline
Uploaded byNETWAYS
OSDC 2017 - Seth Vargo - Modern Secrets Management with Vault
The document discusses modern secrets management using HashiCorp Vault, focusing on security practices such as encrypted key-value stores, authentication, and access controls. It emphasizes that no request can be trusted without proper authentication and outlines various features like database credential management and multi-factor authentication. The presentation is aimed at DevOps professionals and includes insights on service-oriented architecture and security infrastructure.
More Related Content
Similar to OSDC 2017 - Seth Vargo - Modern Secrets Management with Vault
OSDC 2017 - Seth Vargo - Modern Secrets Management with Vault
- 1. Modern Secrets Managementwith Vault https://upload.wikimedia.org/wikipedia/commons/8/87/WinonaSavingsBankVault.JPG
- 2. Seth Vargo Director ofTechnical Advocacy HashiCorp @sethvargo
- 3.
- 4. @sethvargo LOAD BALANCER FIREWALL APPLICATION Physical datacenter All processes handled "in app" TLS terminated at LB/firewall Monolithic Architecture
- 5. @sethvargo LOAD BALANCER SECURITY RULES Service-OrientedArchitecture Shared infrastructure Internal and external requests Nothing is trusted Every request requires auth Expiration and "break glass"
- 6.
- 7.
- 8.
- 9.
- 10. @sethvargo Encryption as aService plaintext iuwhfbgo7et4 71nfslwfener
- 11.
- 12.
- 13.
- 14.
- 15. @sethvargo TOTP Generator 125 284MyCorporate Login - jdoe :27 696 367AWS MFA Token - janedoe :27
- 16. @sethvargo TOTP Authenticator 125 284MyCorporate Login - jdoe :27 696 367AWS MFA Token - janedoe :27 918 491HashiCorp Vault :27
- 17.
- 18.