Introduction
Introduction to Vault
- What is Vault
- How Vault Works
- Why Organizations Choose Vault
- Benefits and Use Cases of Vault
- Comparing Versions of Vault
Learning the Vault Architecture
- Vault Components
- Vault Architecture and Pathing Structure
- Vault Data Protection
- Seal and Unseal
- Unsealing with Key Shards
- Demo Unsealing with Key Shards
- Unsealing with Auto Unseal
- Demo Unsealing with Auto Unseal
- Unsealing with Transit Auto Unseal
- Demo Unsealing with Transit Auto Unseal
- Pros and Cons of Unseal Options
- Vault Initialization
- Vault Configuration File
- Storage Backends
- Audit Devices
- Vault Interfaces
Installing Vault
- Installing and Running Vault Server
- Demo Installing Vault using Packer
- Demo Manually Installing Vault
- Running Vault Dev Server
- Demo Running Vault Dev Server
- Running Vault Server in Production
- Demo Running Vault in Production
- Configuring the Consul Storage Backend
- Configuring the Integrated Storage Backend
Compare Authentication Methods
- Auth Methods Section Overview
- Intro to Auth Methods
- Working with Auth Methods
- Configuring Auth Methods using the CLI
- Demo Configuring Auth Methods using the CLI
- Configuring Auth Methods using the API
- Demo Configuring Auth Methods using the UI
- Vault Authentication using the CLI
- Demo Vault Authentication using the CLI
- Vault Authentication using the API
- Demo Vault Authentication using the API
- Demo Vault Authentication using the UI
- Vault Entities
- Vault Identity Groups
- Choosing an Auth Method
- Differentiate Human vs System Auth Methods
- Demo AppRole Auth Method
- Demo Okta Auth Method
- Demo UserPass Auth Method
- Exam Tips for Objective 1
Create Vault Policies
- Vault Policies Section Overview
- Intro to Vault Policies
- Managing Policies using the CLI
- Managing Policies using the UI
- Managing Policies using the API
- Anatomy of a Vault Policy
- Vault Policies Path
- Vault Policies Capabilities
- Customizing the Path
- Working with Policies
- Exam Tips for Objective 2
Assess Vault Tokens
- Assess Vault Tokens Section Overview
- Announcement Token Update for Vault 110
- Introduction to Vault Tokens
- Token Hierarchy
- Controlling the Token Lifecycle
- Periodic Tokens
- Service Tokens with Use Limits
- Orphan Tokens
- Setting the Token Type
- Managing Tokens using the CLI
- Managing Tokens using the UI
- Managing Tokens using the API
- Root Tokens
- Token Accessors
- Explaining Time to Live TTL
- Create a Token based on Use Cases
- Exam Tips for Objective 3
Compare and Configure Secrets Engines
- Section Overview
- Static vs Dynamic Secrets
- Introduction to Secrets Engines
- Working with a Secrets Engine
- Configuring a Secrets Engine for Dynamic Credentials
- KeyValue Secrets Engine
- Working with KV Secrets Engine
- Encrypting Data with the Transit Secrets Engine
- Using the Transit Secrets Engine
- Demo Transit Secrets Engine
- Demo AWS Secrets Engine IAM
- Demo AWS Secrets Engine Assumed Role
- Demo KeyValue KV Version 1 Secrets Engine
- Demo KeyValue KV Version 2 Secrets Engine
- Demo Database Secrets Engine
- Demo PKI Secrets Engine
- Demo TOTP Secrets Engine
Vault Agent
- Intro to the Vault Agent
- Vault Agent Auto Auth and Token Sink
- Vault Agent Templating
- Demo Vault Agent