Skip to main content
Vault Secrets Engines are the core building blocks of any HashiCorp Vault deployment. They handle everything from storing static secrets and generating dynamic credentials to issuing certificates and performing encryption. In fact, every Vault feature you interact with is delivered via a Secrets Engine. Below are the Vault Associate Exam objectives related to Secrets Engines:
Exam ObjectiveDescription
Choose a secret method based on use caseIdentify the appropriate Secrets Engine for different scenarios
Contrast static vs. dynamic secretsExplain the differences and ideal use cases for each secret type
Define the Transit Secrets EngineUnderstand the purpose and functionality of the Transit engine
Define what Secrets Engines areDescribe the role and mechanics of Secrets Engines in Vault
Although the exam lists these objectives in the order above, this guide follows a more natural progression:
  1. What is a Secrets Engine?
  2. Static vs. Dynamic Secrets
  3. Selecting the Right Secrets Engine for Your Use Case
  4. Deep Dive: The Transit Secrets Engine
Let’s get started!

Watch Video