Vault has a nice trick where they can create a temporary DB credential to hand to clients. If that cred is stolen, it's no good later. You have to convince Vaul

Vault has a nice trick where they can create a temporary DB credential to hand to clients. If that cred is stolen, it's no good later. You have to convince Vault to give you a new cred if you want to talk to the DB. https://www.hashicorp.com/resources/securing-databases-with-dynamic-credentials-vault https://www.hashicorp.com/resources/securing-databases-with-...