Zero-knowledge Architecture, or Leak-free Secrets, with HC Vault
summary
Describes using HashiCorp Vault to build a zero-knowledge infrastructure orchestration architecture that deploys resources into cloud providers (Azure, AWS, GCP) without the orchestrator ever learning root credentials. Explains combining Vault dynamic secrets, fine-grained access control, and lease/token-based secrets management so access credentials can be used by services without being leaked.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 3:16Zero trust versus traditional
- 12:24HashiCorp Vault overview
- 20:26Experience and client cases
- 32:45Zero trust architecture implementation
- 40:05Limitations and best practices
- 43:33Conclusion and Q&A
related talks
42mZero-Knowledge Architecture, or Leak-Free Secrets, with HC Vault
42mZero Trust security with HashiCorp Vault and AWS (PRT239)
36mManaged Zero Trust Security With HashiCorp Cloud Platform
50mDevOps: Shhhh! It's a secret! - HashiCorp Vault
41mHiding secrets in a Vault
44mSecret Management with Hashicorp's Vault
38mKeeping Secrets - A Practical Approach to Managing Credentials
30mEfficiently share and manage secrets across applications with HashiCorp Vault