← 🛡️ Security in the Pipeline
Advanced
Vault dynamic secrets: leases, renewal, revocation and connection pools
Work through a Vault database credential lifecycle, including token and lease relationships, renewal limits, expiry, pool replacement and an outage near the renewal deadline.
View Premium accesscourse lessons, concepts and answers · see current terms
RELATED CONCEPTS
PRACTICE THIS IN REAL QUESTIONS
Infrastructure as Code & ConfigurationTrace a database password from your Terraform pipeline to the resource. Where can it leak, and what closes each hole?→DevSecOps & Supply Chain SecurityWhat does a secrets manager like Vault give you that an encrypted environment variable does not?→DevSecOps & Supply Chain SecurityAn AWS key was committed to a public repo two hours ago. Walk me through the next hour.→DevSecOps & Supply Chain SecuritySealed Secrets, External Secrets, SOPS or Vault CSI? Pick one for a regulated environment.→Infrastructure as Code & ConfigurationNew engineers cannot decrypt the Vault-encrypted group_vars. How did key handling rot, and what is the fix?→DevOps System Design & ArchitectureDatabase passwords sit in env files on two hundred VMs and nobody has rotated them in years. Design the fix that holds permanently.→