Run modern PKI workflows with HCP Vault on AWS
summary
Shows how to run Vault as intermediate CA with an ACM root CA, using Terraform to provision an HCP Vault cluster, HVN-to-VPC peering, and ACM private CA. Demo issues reinvent.devopsrob.com (30-minute TTL) and verifies the full chain; Vault supports ACME, OCSP and HSMs and a single PKI node handles thousands/sec. A cited customer with ~4,000 certs drops certificate-update work from ~two months/year to about one hour per rollout by automating issuance and renewal with Vault Agent and templates.
AI-written summary · about
chapters (6)
- 0:00Introduction to PKI
- 1:53Fundamentals of PKI
- 6:11Traditional PKI challenges
- 11:25Modernizing PKI with Vault
- 19:42Demo: Configuring Vault with ACM
- 48:09Automation and summary
related talks
42mHCP Vault Learn Lab: Operations with Terraform
26mCombining DevOps with PKI Compliance Using HashiCorp Vault & Consul
24mHow the Dynamic Duo of Vault and Puppet Tame SSL Certificates
29mKeys, Certs and Vault: From DevSecOps to Post-Quantum
13mAutomating PKI: Paddy Power Betfair's Journey with Vault
28mSecret Management with Hashicorp´s Vault
20mVault Automation with the HashiCorp Stack in OneMount
31mBuilding a Repeatable and Hardened Vault POC