Build Stuff'15 Ukraine

As the scale of systems grow, and infrastructure becomes elastic through migration to private or public cloud, the issue of secret management becomes far more important. With the amount of sensitive data being stored, and the number of attacks on the rise, it's no longer good enough to hard code API tokens in a properties file or a web.config, or store your AWS credentials in environment variables, and manually roll keys once a year.

In this talk we'll take a practical look at how to manage secrets using Vault, a free and open source secret management tool. We'll look at static secrets such as external API tokens, as well as dynamic secrets such as database users, AWS access keys and certificates, and even how to generate one-time SSH credentials.