Securing Spring Applications with Hashicorp Vault
summary
Shows how to secure Spring applications using HashiCorp Vault via Spring Cloud Vault. Covers token and AppRole authentication, the database secrets engine to create dynamic Postgres credentials that are created and revoked on demand, the PKI secrets engine to issue short‑lived TLS certificates, and the generic secrets backend for application configuration; includes a working Spring Boot demo repo and live examples that demonstrate dynamic credentials and certificate issuance.
AI-written summary · about
chapters (8)
- 0:00Securing Spring with Vault
- 5:32Dynamic DB credentials
- 16:47Vault-Spring integration
- 27:31Certificates vs static secrets
- 34:07Fine-grained access control
- 41:04Dynamic data protection
- 47:58Live Vault-Spring demo
- 53:10Q&A
related talks
42mSpring Vault - managing secrets at scale
51mManage Distributed Configuration and Secrets with Spring Cloud and Vault
47mThe Secret to Handling Dynamic Secrets
28mSecret Management with Hashicorp´s Vault
36mManage Distributed Secrets in Applications on Cloud Foundry With Spring Cloud Vault
28mHow to Store Secrets—and When Do You Need Them—in HashiCorp Vault
40mA Better Way To Manage Secrets
31mModern Security with Microservices and the Cloud