3 ms·
Vault can seem niche however it’s used a lot in high assurance environments given it is easily integrated with Thales HSMs and has FIPS compliance
by firesteelrain 4mo ago
Vault can seem niche however it’s used a lot in high assurance environments given it is easily integrated with Thales HSMs and has FIPS compliance
- konart 4mo ago>niche Literally all companies I've worked for a know about use Vault for storing secrets to be used during deployment. It would be interesting to learn that this is different elsewhere.
- pjmlp 4mo agoYes, we always use the vault/secrets infrastructure of the respective cloud vendor. Never used the product Vault.
- konart 4mo agoYeah, I kind of failed to realise that some (many?) companies literally build around one of the cloud vendors.
- firesteelrain 4mo agoIf in Cloud, then go Cloud native. No reason to run Vault. But on prem, there are limited options and Vault fits the bill. If you want auto unseal with HSM and don't have to worry about the unseal key shards, then you can hook it up the HSM. Of course, HSMs are expensive and you also have to buy a Vault license.
- konart 4mo agoOh, I never thought about the "in Cloud" part.