Secrets Management: Vault and Alternatives

Hardcoded secrets are a leading cause of breaches.

Secrets to Manage

- Database credentials
- API keys
- SSH keys
- Certificates
- Encryption keys

Best Practices

- Never commit secrets to Git
- Rotate secrets regularly
- Audit secret access
- Use short-lived credentials
- Encrypt secrets at rest

Solutions

- HashiCorp Vault
- AWS Secrets Manager
- Azure Key Vault
- GCP Secret Manager
- CyberArk Conjur