Synchrony's journey to automated, resilient and compliant Vault governance
summary
Synchrony claims it turns secrets into measurable business value by piping Vault audit and operational logs into Splunk and building three live Splunk dashboards (static secret expiry, AppRole secret ID tracker, namespace metadata) that send automated 60/30/20/10‑day alerts and incidents. The system yields zero downtime from forgotten credentials, 80% reduction in compliance toil, ~80% of expiry alerts remediated by developers, and zero AppRole escalations; roadmap includes ServiceNow and PKI secret engine integration.
AI-written summary · about
chapters (9)
- 0:00Introduction to Synchrony
- 2:11Identifying governance gaps
- 5:45Architecting the solution
- 11:59Core dashboard features
- 15:08Static secret expiry tracking
- 20:18Managing AppRole secret IDs
- 24:46Namespace metadata dashboard
- 29:02Automation and benefits
- 31:36Lessons and future roadmap
