Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Secrets management with Vault

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Boris Quiroz Boris Quiroz
December 20, 2017
Technology
65
0

Secrets management with Vault

https://www.meetup.com/Santiago-HashiCorp-User-Group/events/245738064/

Avatar for Boris Quiroz

Boris Quiroz

December 20, 2017

More Decks by Boris Quiroz

See All by Boris Quiroz
Docker Images Best Practices
Avatar for Boris Quiroz boris
0
58
Software Freedom Day 2015
Avatar for Boris Quiroz boris
0
48
Code Driven Infrastructure
Avatar for Boris Quiroz boris
0
74
hola mundo
Avatar for Boris Quiroz boris
0
68
DevOps Tools: Chef + Vagrant
Avatar for Boris Quiroz boris
0
230
Kitchen.CI
Avatar for Boris Quiroz boris
0
120
Introducción a HSTS
Avatar for Boris Quiroz boris
0
59
Hands-on Lab
Avatar for Boris Quiroz boris
0
83
Tech, Method & Philosophy for the cloud
Avatar for Boris Quiroz boris
0
60

Other Decks in Technology

See All in Technology
AI時代の私の技術インプットとアウトプット術
Avatar for tonkotsuboy_com tonkotsuboy_com
15
7.8k
開発を止めない CI/CD ~CI Visibilityによる継続的最適化~
Avatar for Ryosuke Tsuruda pensuke628
0
210
AI-DLCを活用した高品質・安全なAI駆動開発実践 / AI Driven Development
Avatar for 吉田真吾 yoshidashingo
1
250
CloudFront VPCオリジンとVPC Latticeサービスの内部ALBをマルチアカウントで一元利用しよう
Avatar for k-kun duelist2020jp
5
260
A Harness for Behaviour: how to get AI to generate code that does what we intend, or "TDD in the age of AI"
Avatar for Matteo Vaccari xpmatteo
1
520
はじめてのDatadog
Avatar for KairiM kairim0
0
230
Databricks 月刊サービスアップデート 2026年05月号
Avatar for ちょし tyosi1212
0
120
Claude code Orchestra
Avatar for Taisei Ozaki ozakiomumkj
2
680
Javaコミュニティをもっと楽しむための9箇条
Avatar for Sugiyama Takaaki takasyou
0
620
Datadog 認定試験の概要と対策
Avatar for Uechi Shingo uechishingo
0
200
イベントで大活躍する電子ペーパー名札 〜その３〜 / ビジュアルプログラミングIoTLT vol.23
Avatar for you（@youtoy） you
PRO
0
170
美味しいスイスチーズを作ろう🧀🐭
Avatar for Taiga Mikami taigamikami
1
180

Featured

See All Featured
Being A Developer After 40
Avatar for Adrian Kosmaczewski akosma
91
590k
The Curious Case for Waylosing
Avatar for Cassini Nazir cassininazir
1
360
SEO in 2025: How to Prepare for the Future of Search
Avatar for Michael King ipullrank
3
3.5k
ラッコキーワード サービス紹介資料
Avatar for ラッコ株式会社 rakko
1
3.5M
Prompt Engineering for Job Search
Avatar for Mfonobong Umondia mfonobong
0
320
Primal Persuasion: How to Engage the Brain for Learning That Lasts
Avatar for Mike Taylor tmiket
0
350
Building a Modern Day 
E-commerce SEO Strategy
Avatar for Aleyda Solis aleyda
45
9.1k
The Illustrated Guide to Node.js - THAT Conference 2024
Avatar for David Neal reverentgeek
1
370
Art, The Web, and Tiny UX
Avatar for Lynn Fisher lynnandtonic
304
21k
Testing 201, or: Great Expectations
Avatar for Joseph Mastey jmmastey
46
8.2k
How to Build an AI Search Optimization Roadmap - Criteria and Steps to Take #SEOIRL
Avatar for Aleyda Solis aleyda
1
2.1k
Amusing Abliteration
Avatar for ianozsvald ianozsvald
1
190

Transcript

  1. Vault Boris Quiroz Q. - [email protected] - github.com/boris

  2. ¿Qué es Vault?

  3. Una herramienta para acceder a secretos de forma segura.

  4. • Almacenamiento seguro • Secretos dinámicos • Encriptación de data

    • Leasing and Renewal • Revocación

  5. Conceptos

  6. • Seal/Unseal • Tokens • Policy • Secret Backend

  7. Políticas

  8. Proporcionan una manera declarativa de delegar acceso a ciertas rutas

    y operaciones en Vault.

  9. path “secret/*” { capabilities = [ “write”, “list” ] }

  10. path “secret/very-secret/*” { capabilities = [ “deny” ] }

  11. path “secret/not-secret/*” { capabilities = [ “create”, “delete”, “list”, “read”,

    “update” ] }

  12. AWS

  13. { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "iam:*",

    "Resource": "*" } ] }

  14. Demo https://git.io/scl-vault-meetup