Advanced System Design Fundamentals
Vote

0% completed

​

Secrets Management Past the Vault

1. Past "Use a Vault"

Most advice about secrets stops at putting them in a manager instead of in the repository. That is necessary and it is the beginning of the subject rather than the end.

The questions that remain after the vault is in place are the ones that decide what a compromise costs.

  • Scope. How much does this one secret unlock?
  • Lifetime. How long is it valid, and what happens when it is not rotated?
  • Blast radius. If this leaks, what do you have to do, and how long does that take?
  • Detection. Would you know it had leaked?

.....

.....

.....

Like the course? Get enrolled and start learning!

Reading Progress

0%

Vote for new content