Unlocking The Secrets: Hands-On Hashicorp Vault

Dive into the world of secrets with HashiCorp Vault! Gain hands-on skills to become proficient in managing your secrets!

What you'll learn

Software engineers/developers looking to learn how to work with HashiCorp Vault API and CLI

Software engineers/developers looking to learn how to create and apply policies to their secrets in Vault

Software engineers/developers looking to learn how to work with different secret engines in Vault

Software engineers/developers looking to learn how to work with different authorisation methods in Vault

Anyone who wants to manage any kind of secrets for their applications and software

Anyone who wants to understand HashiCorp Vault and how it works

Anyone who wants to learn to work with HashiCorp Vault

Anyone who wants to learn how to install HashiCorp Vault

Requirements

No Prior Vault Knowledge Required!

Basic Linux Command Line Understanding

Basic Shell Scripting

General Understanding of Cloud Technologies

Description

Welcome to Unlocking the Secrets: Hands-On HashiCorp Vault, the ultimate guide to mastering secrets management and data security using HashiCorp Vault. In this comprehensive course, you will embark on a transformative learning journey divided into eight sections, each designed to equip you with essential knowledge and hands-on skills to harness the full potential of HashiCorp Vault.Section 1 - IntroductionIn the opening section, "Introduction," you'll get a clear overview of the course structure, who is this course for and what to expect in the upcoming sections.Section 2 - Understanding HashiCorp VaultIn Understanding HashiCorp Vault, you'll explore the core concepts of HashiCorp Vault, including its purpose, use cases, and the underlying architecture. Gain a deep understanding of how Vault can solve real-world problems related to secrets management.Section 3 - Installing HashiCorp VaultInstalling HashiCorp Vault is all about setting up Vault in your environment. You'll discover various installation methods, explore storage backend options, and learn how to configure Vault for optimal performance. By the end of this section, you'll have a fully operational Vault instance.Section 4 - Getting Started with Vault and Vault CLIGetting Started with Vault and Vault CLI introduces you to Vault's Web UI, explores the differences between KV Secrets Engine versions, and teaches you how to work with secrets in both the CLI and UI. Dive into practical tasks like creating, managing secrets, handling secret versions and more.Section 5 - Vault Tokens and Authentication MethodsIn Vault Tokens and Authentication Methods, you'll unravel the mysteries of Vault tokens, learn about authentication methods, and explore various ways to securely access Vault, including basic authentication with username and password, AWS authentication, and GitHub authentication.Section 6 - Working with HashiCorp Vault APIWorking with HashiCorp Vault API takes a hands-on approach to interacting with Vault programmatically. Learn how to use Vault's API Explorer, generate API curl commands with the Vault CLI, and perform operations programmatically using Vault API. Dive deep into the v2 Secrets Engine, covering operations like writing, reading, and managing secrets through the API.Section 7 - More on Secret Engines with VaultMore on Secret Engines with Vault provides an overview of different secret engines and practical use cases. Explore the AWS Secret Engine for temporary credentials, dynamic PostgreSQL database credentials, and dynamic RabbitMQ credentials to enhance your secrets management capabilities.Section 8 - Working with Vault PoliciesThe final section, Working with Vault Policies, dives into policies in detail. Learn how to create secrets, define policies, and work with tokens based on policies. Explore advanced access control with fine-grained policies and understand the importance of root-protected API endpoints.By the end of this course, you'll be well-versed in HashiCorp Vault, equipped to manage secrets effectively, and confident in enhancing your organization's security practices. Join me on this exciting journey and unlock the secrets to secure secrets management with HashiCorp Vault!

Overview

Section 1: Introduction

Lecture 1 Course Overview

Section 2: Understanding HashiCorp Vault

Lecture 2 What is HashiCorp Vault and How it Works?

Lecture 3 Use Cases: What Problems Does HashiCorp Vault Solve?

Lecture 4 HashiCorp Vault Architecture

Section 3: Installing HashiCorp Vault

Lecture 5 Ways You Can Install HashiCorp Vault

Lecture 6 Storage Backend Options for Vault

Lecture 7 Install HashiCorp Vault using Binary

Lecture 8 Ways to Run Vault Server and "dev" Mode

Lecture 9 Generate TLS Certificate to Secure Vault

Lecture 10 Configure Vault using vault.hcl Configuration File

Lecture 11 Created a systemd Service for Vault

Lecture 12 Initialise and Unseal Vault

Lecture 13 [Optional] Install Vault CLI Autocomplete

Section 4: Getting Started with Vault and Vault CLI

Lecture 14 An Introduction to HashiCorp Vault Web UI

Lecture 15 KV Secrets Engine v1 vs. v2

Lecture 16 Working with v1 and v2 Secrets Engines using Vault CLI

Lecture 17 List Secret Engines using Vault CLI

Lecture 18 Write or Update a Secret using Vault CLI

Lecture 19 Working with Secret Version in CLI and UI

Lecture 20 Using a Secret Policy to Generate Secrets using Vault CLI

Lecture 21 Delete a Secret using Vault CLI

Lecture 22 Undelete a Secret to Recover a Version using Vault CLI

Lecture 23 Destroy a Secret to Delete Permanently using Vault CLI

Lecture 24 Working with Secret Metadata using Vault CLI

Section 5: Vault Tokens and Authentication Methods

Lecture 25 Vault Tokens Explained

Lecture 26 Authentication with HashiCorp Vault

Lecture 27 Basic Authentication with Username and Password with Vault

Lecture 28 AWS Authentication with Vault

Lecture 29 Github Authentication with Vault

Section 6: Working with HashiCorp Vault API

Lecture 30 Getting Started with HashiCorp Vault API

Lecture 31 Vault API Explorer

Lecture 32 Using Vault CLI to Get Vault API curl Commands

Lecture 33 Working with v2 Secrets Engine using Vault API

Lecture 34 Write or Update a Secret using Vault API

Lecture 35 Get a Secret using Vault API

Lecture 36 Get an Older Version of a Secret using Vault API

Lecture 37 Delete a Secret using Vault API

Lecture 38 Undelete a Secret using Vault API

Lecture 39 Destroy a Secret using Vault API

Lecture 40 Working with Secret Metadata using Vault API

Section 7: More on Secret Engines with Vault

Lecture 41 Secret Engines Overview

Lecture 42 AWS Secrets Engine for Temporary AWS Credentials

Lecture 43 PostgreSQL Database Secrets Engine for Dynamic Database Credentials

Lecture 44 RabbitMQ Secrets Engine for Dynamic RabbitMQ Credentials

Section 8: Working with Vault Policies

Lecture 45 Policies Overview

Lecture 46 Creating Secrets using Vault CLI to Work with Vault Policies

Lecture 47 Creating Policies using Vault CLI

Lecture 48 Working with Tokens Based on Policies using Vault CLI

Lecture 49 Updating Policies to Observe Token Behavior

Lecture 50 Fine-Grained Policies for Further Token Limitations

Lecture 51 Root Protected API Endpoints

Section 9: Wrapping Up

Lecture 52 Thank You!

Software developers, engineers, managers or simply anyone who are interested in learning HashiCorp Vault