Secrets management in the cloud: Hashicorp Vault on AWS

HashiCorp Vault lessens the need for static, hardcoded credentials by using trusted identities to centralize passwords and control access. It encrypts sensitive data in transit and at rest using centrally managed and secured encryption keys through a single workflow and API.

You can access key-value stores and generate AWS Identity and Access Management (IAM) and AWS Security Token Service (AWS STS) credentials.

In this session, we'll show you how Vault on AWS can enable a more secure way of access to remote hosts using signed SSH and platforms on the AWS Cloud using IAM integration.

We'll explore how to replace using username/password or private key for accessing the remote host, with the added advantage of leveraging Terraform for configuration. We will also explore the pluggable nature of Vault's secrets engine and authentication backends, which make it an attractive offering for enterprises.