Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Secrets management with Vault

Avatar for Boris Quiroz Boris Quiroz
December 20, 2017
Technology
69
0

Secrets management with Vault

https://www.meetup.com/Santiago-HashiCorp-User-Group/events/245738064/

Avatar for Boris Quiroz

Boris Quiroz

December 20, 2017

More Decks by Boris Quiroz

See All by Boris Quiroz
Docker Images Best Practices
Avatar for Boris Quiroz boris
0
60
Software Freedom Day 2015
Avatar for Boris Quiroz boris
0
50
Code Driven Infrastructure
Avatar for Boris Quiroz boris
0
75
hola mundo
Avatar for Boris Quiroz boris
0
68
DevOps Tools: Chef + Vagrant
Avatar for Boris Quiroz boris
0
240
Kitchen.CI
Avatar for Boris Quiroz boris
0
120
Introducción a HSTS
Avatar for Boris Quiroz boris
0
60
Hands-on Lab
Avatar for Boris Quiroz boris
0
83
Tech, Method & Philosophy for the cloud
Avatar for Boris Quiroz boris
0
62

Other Decks in Technology

See All in Technology
Docker Desktop不要の時代が来る？ WSL標準の「wslc」で Linuxコンテナを動かしてみた.
Avatar for ueponx ueponx
0
870
Control Planeで育てるBtoB SaaSの認証基盤 - SRE NEXT 2026
Avatar for pokohide pokohide
1
2.1k
Empower GenAI with Agile - あなたのアジャイルが生成AIのバフになる仕組み
Avatar for Hiroyuki Ito (TheHiro) hageyahhoo
1
160
Compose 新機能総まとめ / What's New in Jetpack Compose
Avatar for Yuki Anzai yanzm
0
160
しくみを学んで使いこなそう GitHub Copilot app
Avatar for Toru Makabe torumakabe
1
140
End-to-Endで考える信頼性 — LINEアプリにおける クライアント開発×SRE連携の実践
Avatar for maru maruloop
4
3.8k
生成AI活用によるODC欠陥分析の分類高速化の実践と導入効果 / 20260703 Suguru Ishii
Avatar for SHIFT EVOLVE shift_evolve
PRO
2
120
デジタル・デザイン構想 by Sayaka Ishizuka
Avatar for Sayaka Ishizuka y150saya
0
200
Claude Codeとハーネスについて考えてみる
Avatar for Oikon oikon48
18
9.1k
Oracle Base Database Service 技術詳細
Avatar for oracle4engineer oracle4engineer
PRO
15
110k
グローバルチームと挑むプロダクト開発
Avatar for SansanTech sansantech
PRO
1
170
AIレビューはどこまで任せられるのか？自動化と人が背負うレビューの境界
Avatar for SansanTech sansantech
PRO
1
160

Featured

See All Featured
Building the Perfect Custom Keyboard
Avatar for Naoto Takai takai
2
810
How GitHub (no longer) Works
Avatar for Zach Holman holman
316
150k
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
55
3.4k
A brief & incomplete history of 
UX Design for the World Wide Web: 1989–2019
Avatar for Jason CranfordTeague jct
2
420
SERP Conf. Vienna - Web Accessibility: Optimizing for Inclusivity and SEO
Avatar for Sara Fernández Carmona sarafernandez
2
1.5k
Helping Users Find Their Own Way: Creating Modern Search Experiences
Avatar for Dan Newman danielanewman
31
3.2k
Utilizing Notion as your number one productivity tool
Avatar for Mfonobong Umondia mfonobong
4
360
Darren the Foodie - Storyboard
Avatar for Kevinho.art khoart
PRO
3
3.4k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
230
23k
The B2B funnel & how to create a winning content strategy
Avatar for Katarina Dahlin katarinadahlin
PRO
1
420
Paper Plane
Avatar for Katie Cordina Lindsey katiecoart
PRO
1
52k
Accessibility Awareness
Avatar for Sarah Abderemane sabderemane
1
150

Transcript

  1. Vault Boris Quiroz Q. - [email protected] - github.com/boris

  2. ¿Qué es Vault?

  3. Una herramienta para acceder a secretos de forma segura.

  4. • Almacenamiento seguro • Secretos dinámicos • Encriptación de data

    • Leasing and Renewal • Revocación

  5. Conceptos

  6. • Seal/Unseal • Tokens • Policy • Secret Backend

  7. Políticas

  8. Proporcionan una manera declarativa de delegar acceso a ciertas rutas

    y operaciones en Vault.

  9. path “secret/*” { capabilities = [ “write”, “list” ] }

  10. path “secret/very-secret/*” { capabilities = [ “deny” ] }

  11. path “secret/not-secret/*” { capabilities = [ “create”, “delete”, “list”, “read”,

    “update” ] }

  12. AWS

  13. { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "iam:*",

    "Resource": "*" } ] }

  14. Demo https://git.io/scl-vault-meetup