# KodeKloud: Beta Courses HashiCorp Certified: Vault Operations Professional 2022 ## HashiCorp Certified: Vault Operations Professional 2022 ### Introduction - [Course Introduction](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Introduction/Course-Introduction/page.md): This course prepares you for the HashiCorp Certified Vault Operations Professional exam through theory, live demos, and hands-on practice. - [HashiCorp Documentation Review](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Introduction/HashiCorp-Documentation-Review/page.md): This guide helps navigate HashiCorp Vault documentation for the Vault Certified Operations Professional exam, highlighting key sections and best practices. ### Create a working Vault server configuration given a scenario - [Section Overview Create a Working Vault Server Config](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Section-Overview-Create-a-Working-Vault-Server-Config/page.md): Learn to build a production-ready Vault server setup, including configuration, enabling secrets engines, and managing authentication methods. - [Enable and Configure Secrets Engines](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Enable-and-Configure-Secrets-Engines/page.md): This guide explores enabling, configuring, and managing HashiCorp Vault’s Secrets Engines using the CLI, API, and UI. - [KeyValue Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/KeyValue-Secrets-Engine/page.md): This guide explores the Key/Value Secrets Engine in Vault, focusing on storing static secrets and managing them effectively. - [Working with the KeyValue Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Working-with-the-KeyValue-Secrets-Engine/page.md): This guide explains managing secrets in HashiCorp Vault’s Key/Value Secrets Engine using the Vault CLI, covering various operations for both KV v1 and v2. - [Demo KeyValue Secrets Engine Version 1](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-KeyValue-Secrets-Engine-Version-1/page.md): Step-by-step guide on using the KV secrets engine version 1 in HashiCorp Vault for managing secrets. - [Demo KeyValue Secrets Engine Version 2](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-KeyValue-Secrets-Engine-Version-2/page.md): This guide covers HashiCorp Vaults Key/Value Secrets Engine Version 2, including management, versioning, and metadata operations for secrets. - [Database Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Database-Secrets-Engine/page.md): Vault’s Database Secrets Engine generates dynamic, time-bound credentials for databases, automatically revoking them upon lease expiration to enhance security and reduce risk. - [Demo Database Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Database-Secrets-Engine/page.md): This guide explains how to configure HashiCorp Vault’s Database Secrets Engine for managing dynamic PostgreSQL credentials in AWS RDS. - [Identity Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Identity-Secrets-Engine/page.md): Vault’s Identity Secrets Engine manages identities and policies, tracks clients, maps authentication methods, and enables scalable policy assignment using groups. - [Demo Identity Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Identity-Secrets-Engine/page.md): Learn to use HashiCorp Vaults Identity Secrets Engine for user creation, policy management, and entity handling. - [Transit Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Transit-Secrets-Engine/page.md): This article explores HashiCorp Vault’s Transit Secrets Engine for encryption-as-a-service and centralized key management. - [Demo Transit Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Transit-Secrets-Engine/page.md): This tutorial covers enabling and configuring the Vault Transit Secrets Engine for managing encryption keys and performing cryptographic operations. - [PKI Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/PKI-Secrets-Engine/page.md): The PKI Secrets Engine in HashiCorp Vault automates the issuance and management of X.509 certificates for secure communications. - [Demo PKI Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-PKI-Secrets-Engine/page.md): This guide explains how to issue TLS certificates using the Vault PKI Secrets Engine with a preconfigured CA setup. - [Cubbyhole Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Cubbyhole-Secrets-Engine/page.md): Vault’s Cubbyhole Secrets Engine provides isolated storage for secrets, ensuring each token has a private compartment that is destroyed upon expiration or revocation. - [Demo Cubbyhole Secrets Engine](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Cubbyhole-Secrets-Engine/page.md): Learn to use Vault’s Cubbyhole Secrets Engine for data isolation and Response Wrapping for secure, one-time secret delivery. - [Vault Security Hardening](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Vault-Security-Hardening/page.md): This guide explores best practices for securely hardening a Vault deployment following HashiCorp’s security model and defense-in-depth principles. - [Auto Unsealing Vault](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Auto-Unsealing-Vault/page.md): This guide covers Vaults auto-unseal feature, its mechanisms, configuration, migration strategies, and design considerations for simplifying the unsealing process. - [Demo Auto Unseal Vault](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Auto-Unseal-Vault/page.md): This guide explains how to configure Vault with AWS KMS for auto-unseal and migrate from Shamir sealing. - [Implementing Integrated Storage](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Implementing-Integrated-Storage/page.md): This guide covers Vault’s Integrated Storage, its configuration, operation, and benefits for high availability and durability without external storage systems. - [Demo Integrated Storage](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Integrated-Storage/page.md): This article provides a walkthrough for configuring a highly available Vault Raft cluster on AWS with auto-unseal using AWS KMS. - [Demo Integrated Storage Snapshots](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Integrated-Storage-Snapshots/page.md): This guide demonstrates creating, restoring Raft snapshots in Vault’s Integrated Storage, and configuring automated backups with Vault Enterprise. - [Enable and Configure Auth Methods](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Enable-and-Configure-Auth-Methods/page.md): This guide introduces Vaults authentication methods, their workflow, supported options, and management via CLI and API. - [AppRole Auth Method](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/AppRole-Auth-Method/page.md): HashiCorp Vault’s AppRole auth method allows machines and automated pipelines to authenticate securely using a predefined role with Role ID and Secret IDs. - [Demo AppRole Auth Method](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-AppRole-Auth-Method/page.md): This tutorial explains how to configure and use Vault’s AppRole authentication method for machine clients to access a KV secrets engine. - [Userpass Auth Method](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Userpass-Auth-Method/page.md): The Userpass authentication method allows Vault clients to log in using a username and password stored in Vault for basic credential management. - [Demo Userpass Auth Method](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Userpass-Auth-Method/page.md): This tutorial covers enabling and managing the userpass auth method in Vault, including user creation and authentication. - [Vault Tokens Auth Method](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Vault-Tokens-Auth-Method/page.md): Vaults token authentication is essential for accessing Vault, requiring valid tokens for most operations and supporting various token types for different use cases. - [Secure Vault Initialization](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Secure-Vault-Initialization/page.md): This article explains the secure initialization process of a HashiCorp Vault cluster, including key generation, distribution, and best practices for security. - [Demo Practice secure Vault initialization](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Practice-secure-Vault-initialization/page.md): This guide demonstrates how to initialize HashiCorp Vault with encrypted recovery keys and a root token using public OpenPGP keys. - [Regenerating a Root Token](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Regenerating-a-Root-Token/page.md): This guide explains how to regenerate a root token in HashiCorp Vault when standard authentication methods fail. - [Demo Regenerating a Root Token](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Regenerating-a-Root-Token/page.md): This tutorial explains how to recover access to a Vault cluster by regenerating a root token using recovery keys. - [Rekey Vault and Rotate Encryption Keys](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Rekey-Vault-and-Rotate-Encryption-Keys/page.md): Learn to rekey Vault and rotate encryption keys for enhanced security and compliance in Vault administration tasks. - [Demo Rekey Vault and Rotate Encryption Keys](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Create-a-working-Vault-server-configuration-given-a-scenario/Demo-Rekey-Vault-and-Rotate-Encryption-Keys/page.md): This hands-on guide teaches rekeying a Vault cluster and rotating encryption keys using AWS KMS for enhanced security. ### Monitor a Vault Environment - [Section Overview Monitor a Vault Environment](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Monitor-a-Vault-Environment/Section-Overview-Monitor-a-Vault-Environment/page.md): This article covers monitoring a Vault environment, focusing on telemetry, audit logs, and operational logs for effective operations and exam preparation. - [Monitor and Understand Telemetry](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Monitor-a-Vault-Environment/Monitor-and-Understand-Telemetry/page.md): This article focuses on monitoring Vault telemetry, audit logs, and operational logs for performance insights. - [Monitor and Understand Audit Logs](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Monitor-a-Vault-Environment/Monitor-and-Understand-Audit-Logs/page.md): Learn to monitor HashiCorp Vault activity by capturing requests and responses through audit logs for security, compliance, and troubleshooting. - [Demo Audit Logs](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Monitor-a-Vault-Environment/Demo-Audit-Logs/page.md): Learn to configure and inspect Vault’s audit device, including listing, enabling, generating events, and viewing logs. - [Monitor and Understand Operational Logs](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Monitor-a-Vault-Environment/Monitor-and-Understand-Operational-Logs/page.md): This guide explains how to work with HashiCorp Vault’s operational logs for troubleshooting and adjusting verbosity. - [Demo Vault Operational Logs](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Monitor-a-Vault-Environment/Demo-Vault-Operational-Logs/page.md): Learn to use systemd journal logs for troubleshooting and verifying HashiCorp Vault server deployments, covering common errors and AWS KMS auto-unseal issues. ### Employ the Vault Security Model - [Section Overview Employ the Vault Security Model](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Employ-the-Vault-Security-Model/Section-Overview-Employ-the-Vault-Security-Model/page.md): This section covers the HashiCorp Vault security model focusing on client authentication and security implications in Kubernetes deployments. - [Secure Introduction of Vault Clients](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Employ-the-Vault-Security-Model/Secure-Introduction-of-Vault-Clients/page.md): This guide explores methods to securely introduce Vault clients, ensuring applications obtain secrets without exposing initial credentials. - [Running Vault in Kubernetes](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Employ-the-Vault-Security-Model/Running-Vault-in-Kubernetes/page.md): This guide explores security implications and best practices for running HashiCorp Vault on Kubernetes platforms. ### Build Fault-Tolerant Vault Environments - [Section Overview Build Fault Tolerant Vault Environments](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Build-Fault-Tolerant-Vault-Environments/Section-Overview-Build-Fault-Tolerant-Vault-Environments/page.md): This article covers building fault-tolerant HashiCorp Vault environments focusing on clustering and multi-datacenter replication for enterprise-grade deployments. - [Configure a Highly Available Vault Cluster](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Build-Fault-Tolerant-Vault-Environments/Configure-a-Highly-Available-Vault-Cluster/page.md): This guide explains how to deploy a highly available HashiCorp Vault cluster with redundancy, fault tolerance, and seamless scalability. - [Demo Build an HA Cluster Manually](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Build-Fault-Tolerant-Vault-Environments/Demo-Build-an-HA-Cluster-Manually/page.md): This tutorial guides manual deployment of a high-availability Vault cluster on AWS EC2 using Raft and AWS KMS for auto-unseal. - [Demo Build an HA Cluster Using Retry Join](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Build-Fault-Tolerant-Vault-Environments/Demo-Build-an-HA-Cluster-Using-Retry-Join/page.md): This guide explains how to deploy a three-node Vault High Availability cluster on EC2 using the retry_join configuration for automatic node discovery. - [Demo Build an HA Cluster Using Auto Join](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Build-Fault-Tolerant-Vault-Environments/Demo-Build-an-HA-Cluster-Using-Auto-Join/page.md): This guide explains how to configure a Vault high-availability cluster using the auto-join feature for automatic node discovery. - [Enable and Configure Disaster Recovery DR Replication](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Build-Fault-Tolerant-Vault-Environments/Enable-and-Configure-Disaster-Recovery-DR-Replication/page.md): This guide explains how to enable and configure Disaster Recovery replication in Vault Enterprise, covering setup, performance comparison, and reference architectures. - [Demo Disaster Recovery DR Replication](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Build-Fault-Tolerant-Vault-Environments/Demo-Disaster-Recovery-DR-Replication/page.md): This guide explains how to configure Disaster Recovery replication between two Vault Enterprise clusters. - [Promote a Secondary Cluster](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Build-Fault-Tolerant-Vault-Environments/Promote-a-Secondary-Cluster/page.md): This tutorial explains how to promote a DR secondary cluster to primary in HashiCorp Vault to minimize downtime during primary cluster failure. - [Demo Promote a Secondary Cluster](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Build-Fault-Tolerant-Vault-Environments/Demo-Promote-a-Secondary-Cluster/page.md): Learn to safely demote a primary cluster and promote a DR secondary cluster in HashiCorp Vault with minimal downtime and data integrity. ### Understand the Hardware Security Module (HSM) Integration - [Section Overview Understand the Hardware Security Module HSM Integration](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Understand-the-Hardware-Security-Module-HSM-Integration/Section-Overview-Understand-the-Hardware-Security-Module-HSM-Integration/page.md): This lesson covers integrating a Hardware Security Module with HashiCorp Vault, focusing on Auto Unsealing and Seal Wrap features for enhanced security. - [Benefits of Auto Unsealing with HSM](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Understand-the-Hardware-Security-Module-HSM-Integration/Benefits-of-Auto-Unsealing-with-HSM/page.md): This article discusses the integration of Hardware Security Modules for auto unsealing Vault, enhancing security, simplifying operations, and ensuring compliance. - [Benefits and Use Cases of Seal Wrapping](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Understand-the-Hardware-Security-Module-HSM-Integration/Benefits-and-Use-Cases-of-Seal-Wrapping/page.md): This article discusses seal wrapping in HashiCorp Vault, highlighting its benefits for double encryption and FIPS 140-2 compliance in high-security environments. ### Scale Vault for Performance - [Section Overview Scale Vault for Performance](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Scale-Vault-for-Performance/Section-Overview-Scale-Vault-for-Performance/page.md): Learn to optimize HashiCorp Vault for high throughput and low latency through key performance features and techniques. - [Using Batch Tokens](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Scale-Vault-for-Performance/Using-Batch-Tokens/page.md): Learn to work with batch tokens in Vault, designed for high-throughput operations and seamless replication without persistence. - [Demo Batch Tokens](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Scale-Vault-for-Performance/Demo-Batch-Tokens/page.md): This guide covers managing HashiCorp Vault Batch Tokens, including creation, revocation, inspection, and authentication. - [Performance Standby Nodes](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Scale-Vault-for-Performance/Performance-Standby-Nodes/page.md): This article explains Performance Standby Nodes in HashiCorp Vault for scaling read throughput in Vault Enterprise. - [Enable and Configure Performance Replication](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Scale-Vault-for-Performance/Enable-and-Configure-Performance-Replication/page.md): This guide explains how to enable and configure performance replication in Vault for high availability and low-latency reads across clusters. - [Demo Performance Replication](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Scale-Vault-for-Performance/Demo-Performance-Replication/page.md): This tutorial covers configuring Vault Enterprise performance replication between primary and secondary clusters for high-throughput, low-latency synchronization. - [Create a Paths Filter](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Scale-Vault-for-Performance/Create-a-Paths-Filter/page.md): Learn to use Vault’s path filter feature to control data replication between clusters, ensuring compliance with regulatory requirements like GDPR. ### Configure Access Control - [Section Overview Configure Access Control](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Access-Control/Section-Overview-Configure-Access-Control/page.md): Learn to secure your Vault deployment by defining access control strategies through identity management, policies, and multi-approval workflows. - [Vault Identity Entities and Groups](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Access-Control/Vault-Identity-Entities-and-Groups/page.md): Learn how HashiCorp Vaults Identity system manages user and machine identities, unifies authentication methods, and streamlines permission assignment. - [Vault Policies Part 1](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Access-Control/Vault-Policies-Part-1/page.md): This guide explains how Vault policies control access to secrets and paths in HashiCorp Vault. - [Vault Policies Part 2](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Access-Control/Vault-Policies-Part-2/page.md): This article explores Vault policy capabilities, including CRUD operations, wildcards, ACL templates, and policy testing for fine-grained access control. - [Understanding Sentinel Policies](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Access-Control/Understanding-Sentinel-Policies/page.md): This article explains Sentinel, HashiCorps policy-as-code framework for Vault, detailing its features, policy types, and creation process. - [Control Group](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Access-Control/Control-Group/page.md): Control groups require designated approvers to authorize requests for sensitive Vault paths, enhancing security through multi-party approval. - [Vault Namespace](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Access-Control/Vault-Namespace/page.md): Vault Namespaces enable isolated virtual environments within a single cluster, facilitating multi-tenancy and delegated management of policies, auth methods, and secrets. - [Demo Namespace](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Access-Control/Demo-Namespace/page.md): This lesson covers working with Vault namespaces using CLI and UI in Vault Enterprise 1.11. ### Configure Vault Agent - [Section Overview Configure Vault Agent](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Vault-Agent/Section-Overview-Configure-Vault-Agent/page.md): This article explains how to configure the HashiCorp Vault Agent for authentication, token renewal, and dynamic template rendering. - [Vault Agent Auto Auth and Token Sink](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Vault-Agent/Vault-Agent-Auto-Auth-and-Token-Sink/page.md): Enables legacy applications to consume Vault secrets without embedding client logic, handling authentication, token management, caching, and templating on behalf of your app. - [Vault Agent Templating](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Vault-Agent/Vault-Agent-Templating/page.md): This guide configures Vault Agent Templating for legacy applications to access Vault secrets through local files without altering application code. - [Demo Vault Agent](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Configure-Vault-Agent/Demo-Vault-Agent/page.md): This tutorial explains configuring HashiCorp Vault Agent for automatic AppRole login and dynamic template rendering to inject secrets into a configuration file. ### Exam Experience and Expectations - [Exam Experience and Expectations](https://notes.kodekloud.com/docs/HashiCorp-Certified-Vault-Operations-Professional-2022/Exam-Experience-and-Expectations/Exam-Experience-and-Expectations/page.md): This article outlines what to expect on the HashiCorp Vault Operations Professional exam, including question formats and exam interface details.