How We Learned to Manage Millions of Accounts and Their Secrets
summary
How to manage millions of user accounts and their secrets by tying account/product/component inventory to support and development teams, and mapping roles/accounts in an IGA (Identity Governance and Administration) system. Covers integrating PAM and HashiCorp Vault for secret custody, linking Vault/PAM access from IGA with role separation, centralized Linux access patterns (central auth vs SSH keys, sudo control), using Vault for certificates (including Istio + Vault Agent), and the pros and cons of automating these processes.
AI-written summary · about
chapters (11)
- 0:00Secrets management intro
- 3:44PAM overview
- 7:16Volt for machines
- 11:59LTA benefits and injection
- 13:48IG account automation
- 18:15CMDB and access integration
- 22:31IG architecture and security
- 25:46Linux sudo management
- 27:33Performance and scalability
- 30:46Key lessons
- 32:30Q&A
related talks
28mHow to Store Secrets—and When Do You Need Them—in HashiCorp Vault
38mKeeping Secrets - A Practical Approach to Managing Credentials
43mSecret Management with Hashicorp's Vault
25mCan you keep a secret?
28mEmbedding secrets governance into the enterprise through organizational change
28mSecret Management with Hashicorp´s Vault
38mSecrets Management - Falling into the Pit of Success
50mDevOps: Shhhh! It's a secret! - HashiCorp Vault