4 ms·
Vault does more than store secrets. For example, with Postgres it can store root creds and issue non-root, time-bound creds for each service. Vault's "backend
by tonyhb 7y ago
Vault does more than store secrets.
For example, with Postgres it can store root creds and issue non-root, time-bound creds for each service. Vault's "backends" allow it to do _a lot_ of things that a secure static credentials manager can't.
Not to say that this isn't good though – any proper secret management system is better than none :D
- rossmohax 7y agoVault is single system, accessible over the network with root access to all datastores in the company... How is it good for security? Kerberos solves very same problem of using only short lived tokens on the wire when accessing services, but it fall out of fashion .