Secrets Management: Vault and Alternatives

Securely store and access credentials and API keys.

Hardcoded secrets are a leading cause of breaches.

Secrets to Manage

- Database credentials
- API keys
- SSH keys
- Certificates
- Encryption keys

- Never commit secrets to Git
- Rotate secrets regularly
- Audit secret access
- Use short-lived credentials
- Encrypt secrets at rest

- HashiCorp Vault
- AWS Secrets Manager
- Azure Key Vault
- GCP Secret Manager
- CyberArk Conjur