3 ms·

This would be taking on Vaults top-tier enterprise package when looking at the feature list? https://www.hashicorp.com/products/vault/pricing/ https://www.hash

• laumars 7y ago
  Vault can do a lot more than AWS Secrets Manager -- possibly GCP too but I've not checked. So if you're paying for Vault (bare in mind Hashicorp also do a free version) then odds are you want enterprise features rather than an encrypted key/value store.
• tonyhb 7y ago
  Vault does more than store secrets. For example, with Postgres it can store root creds and issue non-root, time-bound creds for each service. Vault's "backends" allow it to do _a lot_ of things that a secure static credentials manager can't. Not to say that this isn't good though – any proper secret management system is better than none :D
  • rossmohax 7y ago
    Vault is single system, accessible over the network with root access to all datastores in the company... How is it good for security? Kerberos solves very same problem of using only short lived tokens on the wire when accessing services, but it fall out of fashion .