Roche: Securing & Connecting Healthcare Platforms
summary
Roche secures and distributes device and platform credentials by deploying HashiCorp Vault with namespace isolation, provisioning namespaces via Terraform and a GitHub-based self‑service flow, and exposing Vault through Cloudflare Bring Your Own IP for global reach. Dynamic secret engines rotate credentials automatically, and the rollout hits measurable scale: 60 product teams, 600 users onboarded in ten months. The setup solves cross-region accessibility and credential rotation; next step integrates Boundary to centralize multi-cloud and on‑prem access management.
AI-written summary · about
chapters (22)
- 0:00Introduction
- 1:05Facts
- 1:53Who is Roche
- 2:43Global Footprint
- 3:01Diagnostic Division
- 3:49Navify
- 4:42Rush informatics
- 6:30Technology landscape
- 7:07HashiCorp stack
- 7:30Credentials
- 8:12Overview
- 8:27Operating Model
- 9:46Secret Management Requirements
- 11:35Secret Management Solution
- 13:30SelfService Approach
- 16:05Security Challenges
- 17:46Architecture
- 18:43Vault Usage
- 20:51Future Challenges
- 21:24Initial Approach
- 22:29Conclusion
- 23:26Outro
related talks
38mKeeping Secrets - A Practical Approach to Managing Credentials
14mSecurity lifecycle management in a multicloud world
28mEmbedding secrets governance into the enterprise through organizational change
31mSecure Your Multi-Cloud Delivery Pipeline with HashiCorp Vault
12mCentralize and manage secrets with HashiCorp Cloud
30mEfficiently share and manage secrets across applications with HashiCorp Vault
43mSecret Management with Hashicorp's Vault
29mHow to get dynamic with secrets management