Modern Security with Microservices and the Cloud
summary
Vault demos HashiCorp Vault running in dev mode, shows KV encrypted storage with TLS and on-disk blobs, the transit encryption API that returns ciphertext for DB rows, and the dynamic DB creds engine that creates ephemeral Postgres users (each expires in an hour) via SQL templates. Demo uses local Postgres in Docker, issues and revokes tokens and leases to remove thousands of credentials instantly, and exposes TOTP provisioning and verification via the Vault HTTP API — all working live.
AI-written summary · about
chapters (15)
- 0:00Introduction and speaker
- 0:48Perimeter security limitations
- 3:40Modern cloud security challenges
- 5:45Defense in depth approach
- 8:12Cloud security advantages
- 9:17Modern security features
- 12:55Vault introduction
- 13:40Starting Vault server
- 14:20Vault authentication
- 15:25Static secrets with Vault
- 17:53Transit backend encryption
- 21:27Dynamic database credentials
- 25:18Revoking compromised access
- 27:48TOTP multi-factor auth
- 30:21Vault API and conclusion
related talks
31mModern Security With Microservices And The Cloud
41mModern Security with Microservices and the Cloud
38mHow To Secure Your MicroServices
40mA Better Way To Manage Secrets
28mSecret Management with Hashicorp´s Vault
51mIntroduction to Vault
42mDynamic credentials for Kubernetes workloads with Vault and VSO
44mSecret Management with Hashicorp's Vault