Learn how a company transformed HashiCorp Vault Community Edition (CE) into a highly automated, multi-user secret management system in this 45-minute conference talk from DevOops. Discover the journey of customizing Vault CE when Enterprise version became unavailable, focusing on automating access management for over 400 teams with different user types. Explore implemented solutions for access control segregation, two-factor authentication, and log analysis for service efficiency and security monitoring. Gain insights into handling unseal keys, administrative processes, and upcoming planned improvements to the CE version. The presentation details how the team created an automated system capable of instantly generating policies for service accounts, tokens, and roles while maintaining security standards through injection analysis and user authentication monitoring.
Overview
Syllabus
Михаил Пахомов — Как мы захотели автоматизировать Vault CE и во что его в итоге превратили
Taught by
DevOops