Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [secrets-management]

The tag has no usage guidance.

0
votes
0answers
44 views

How to share administrator access in a Safe and special way?

I have assigned to a project that our customers needs to know their devices administrator password. We used the envelope technique with a special sticker on it, but this not the best way because the ...
0
votes
0answers
28 views

Is Azure Key Vault more secure than the machine certificate store?

I'm trying to secure the communication between two on-premise legacy applications (one .NET and one Java) using client certificates. One application is exposed externally so I don't want to rely on ...
0
votes
0answers
26 views

How should I store and distribute deployment configurations?

When developing web applications that require access to a database, or any other service, they will somehow have to posess a secret like a password or connection string. This secret has to be ...
0
votes
0answers
34 views

Saving all secret keys, access data in heroku environ instead of config file?

I have a python/flask app and I use heroku to host it. I use some additional services, such as stripe, postgresql or emails. All these services have either secret keys or other access data, which ...
0
votes
1answer
82 views

How do I protect the Azure Client ID and Client Secret in HashiCorp Vaults with AKV Auto-Unseal?

Say I set up a HashiCorp Vault, on dedicated hardware, with an AKV seal stanza like the following: seal "azurekeyvault" { tenant_id = "46646709-b63e-4747-be42-516edeaf1e14" client_id = "...
0
votes
1answer
80 views

If one HashiCorp Vault Policy allows a capability, and another denies it, how does it decide which Policy to honor?

HashiCorp Vault is an open source tool for secrets management. I'm using it for this purpose, and have come across a minor issue. I seemingly cannot deny access to a specific API path. I've tested ...
2
votes
1answer
289 views

Can I use HashiCorp Vault to restrict access to credentials based on CIDR ranges?

This seems like a pretty simple use case, but it would depend on some pretty recently added functionality which I might not understand yet: A python script gets populated by configuration management ...
5
votes
1answer
871 views

Vault Secret server best practices

Recently Hashicorp released a secrets management solution called Vault. It is a free and open source general secrets storage and secret generator, acting as a Vault for passwords, encryption keys, ...