Vertex

Secrets management

Secrets belong in a manager, injected at runtime, never in the repository. Assume anything committed once is compromised forever.

Lesson 4.218m 45sIntermediate6.4k students

Chapters

18:45
  1. 0:00Introduction to Terraform Secrets
  2. 0:48Method 1: Using Variables and TFvars (Good
  3. 4:44Method 2: Using Environment Variables (Better
  4. 7:55Method 3: HashiCorp Vault Integration (Best
  5. 17:32Benefits of HashiCorp Vault & Essential Security Practice
  6. 18:06Conclusion

What this lesson covers

  • Keep credentials out of source control
  • Inject secrets at runtime and scope them tightly
  • Rotate credentials and revoke exposed ones immediately

This lesson sits in Hardening and Supply Chain, part of Practical Web Security. It assumes what came before it and leads directly into the next lesson in the module.

In this lesson you will

  • Keep credentials out of source control
  • Inject secrets at runtime and scope them tightly
  • Rotate credentials and revoke exposed ones immediately

Resources

Previous lessonHTTPS, security headers, and CSP4.1 · 8m 6sNext lessonDependency and supply chain risk4.3 · 13m 44s