Zero Trust Security and Identity Management with Boundary
summary
Shows HashiCorp Boundary replacing VPN/bastion workflows with dynamic credentials via KMS, a controller/worker architecture and Postgres storage to proxy SSH/HTTP/kubectl sessions while providing full session visibility and role-based scopes (global→org→project→host catalog→targets). Demonstrates both dev single-node and HA deployments, OIDC (GitHub/Okta/Azure AD) auth, optional Vault token storage, and a Terraform run (Boundary v0.7.4) that Terraform provider created 23 objects and applied successfully to provision users, roles, host sets and targets.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:10Traditional access workflow
- 3:03Challenges of legacy systems
- 6:19Boundary overview
- 7:44Boundary architecture
- 14:22Boundary demonstration
- 19:44Automating with terraform
- 27:10Conclusion
related talks
39mExplore HashiCorp Boundary
34mHashiCorp Boundary: Then & Now
15mBoundary: Then and Now [Abridged]
24mSecure and Scale Access to Your Multi-Cloud Resources Using HashiCorp Boundary
36mManaged Zero Trust Security With HashiCorp Cloud Platform
32mSimplifying remote access in dynamic environments with Boundary
01h 02mIntroduction to Zero Trust Security
37mSecure Remote Access With Boundary and Azure AD