Delivered by Josh Corrick
At some point in your automation journey you will need to provide secrets to interact with systems such as APIs, Databases, Identity Stores, etc. The easiest method is often putting secrets directly into your code, but doing this often opens up your organization to the highest risk since anyone who has your code also likely has access to your most important assets. One way of dealing with this problem is moving your secrets to an encrypted file or secure store where you can retrieve secrets when they are needed. One solution for this is Hashicorp Vault, which provides multiple ways to store and retrieve secrets across various automation methods. This talk will walk through the fundamentals of Hashicorp Vault, taking some risky code and converting it to use dynamic secrets as well as leveraging secret lookup in CI_CD Pipelines.