Securely Managing Secrets with Vault

Track: Security
Skill Level: Beginner
Room: Room A315
Time Slot: Thu 2/23, 2:30 PM
Tags: java , spring , security
Abstract

Have you ever deployed to production with a database password stored in plain text? Have you encrypted your database password, but then did not know how to store the encryption key securely? Are you certain you encrypted the password properly?

HashiCorp Vault is completely free and open source solution to securely manage secrets. It supports secret storage, key rolling, revocation of secrets, auditing, and much more.

In this talk Rob will demonstrate how Vault can make securely managing secrets easy. He will then demonstrate how Spring Vault can remove boilerplate code necessary to work with Vault.

Mark Paluch

Mark is a Software Craftsman working as Spring Data Engineer at Pivotal and lettuce Redis driver project lead. He is a member of the CDI 2.0 expert group and passionate about open source software. He also works on Spring’s Vault projects and enjoys presenting on technical topics.

Have a Question

CONTACT US