Secret Management Courses and Certifications

Using Ruby on Rails with Cloud SQL for PostgreSQL on Cloud Run

In this lab, you'll learn how to deploy a new Ruby on Rails application using Google Cloud SQL for PostgreSQL on Cloud Run.

• Google Cloud Skills Boost
• 1 hour
• On-Demand
• Paid Course

Security BSides San Francisco

Secret Hunting

Discover techniques for finding, rotating, and safely managing secrets in applications. Learn best practices for secure secret storage and handling compromised credentials.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

BSidesLV

PAL is Your Pal - Bootstrapping Secrets in Docker

Learn about PAL, a tool for secure secret management in Docker containers. Explore enterprise password management, configuration tools, and containerized deployments with practical applications and demos.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

NDC Conferences

Secret Management - The Soft Way

Explore GitOps-based secret management techniques for maintaining security best practices while enabling local development use, offering seamless solutions across various environments.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

NDC Conferences

Take Control of Your Cloud Environment Using IaC With Pulumi

Discover how Pulumi enables declarative infrastructure as code, allowing complete environment rebuilds with a single command for efficient cloud management and governance compliance.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

NDC Conferences

Introducing the OWASP Top 10 for Kubernetes

Explore Kubernetes security risks, including workload configurations, supply chain vulnerabilities, and RBAC issues. Learn mitigation strategies and best practices for securing containerized infrastructure.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

NDC Conferences

Easier Infrastructure and Safer Secrets with Pulumi, Azure, and .Net Core

Learn to build cloud infrastructure using Pulumi, manage secrets securely, and create a .NET Core app with safe secret handling. Discover how to integrate these practices into a DevOps pipeline for secure production deployment.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

USENIX

Multicloud and the Chamber of Secrets

Exploring strategies for secure secret management in multicloud environments, balancing availability and security while meeting auditor requirements and engineer needs.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Zero Trust - Vault, Consul, and Boundary

Explore HashiCorp's Zero Trust security model using Vault, Consul, and Boundary. Learn to implement robust access control, service discovery, and secure remote access in modern infrastructure.

• YouTube
• 1 hour 54 minutes
• On-Demand
• Free Video

Docker

Skip the Anxiety Attack - Build Secure Apps with Docker and Kubernetes

Learn to build secure applications using Docker and Kubernetes, reducing anxiety and enhancing your development process with industry-leading containerization and orchestration technologies.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Docker

Improving Image Builds with Advanced Docker Build Techniques

Learn advanced Docker BuildKit features for faster, more secure image builds, including secret and cache management techniques.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Rust

Share Secrets Safely: Introduction to Secure Team GPG Usage - Rust Cologne

Learn about 'Share Secrets Safely', a tool for secure GPG usage in teams, featuring journey-level testing and efficient secret management without disk storage.

• YouTube
• 21 minutes
• On-Demand
• Free Video

OWASP Foundation

Can Kubernetes Keep a Secret? - Secure Secret Management in Kubernetes

Explore secure secret management in Kubernetes, including native secrets' limitations and alternative solutions like Kamus for encrypting sensitive data accessible only by your app at runtime.

• YouTube
• 39 minutes
• On-Demand
• Free Video

OWASP Foundation

Storing Secrets in the Cloud and Data Center: Strategies and Tools

Explore strategies for securely storing and managing credentials in cloud and data center environments, covering tools, technologies, and best practices for developers and operational teams.

• YouTube
• 48 minutes
• On-Demand
• Free Video

OWASP Foundation

Improving the Security of Software Defined Infrastructures - AppSec EU 2017

Explore security challenges in Software Defined Infrastructures, learn attack surfaces, vulnerability identification techniques, and remediation strategies for configuration management tools like Puppet or Chef.

• YouTube
• 26 minutes
• On-Demand
• Free Video