HashiCorp Vault

Core APIs for HashiCorp Vault integration.

What is Vault?

Vault is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, or certificates.

Vault is an open source project, and has some excellent documentation and introduction resources.

• What is Vault?
• Common Use Cases
• Getting Started
• GitHub Project

Why Vault with Drupal?

Unparalleled Feature-Set

Vault has a huge range of features. Just to name a few:

• Encrypted key/value storage
• Encryption-as-a-service
• Automatic rotation of credentials
• Revokation of credentials
• Audit logging for compliance and intrusion detection

Free and Open Source Software

The Drupal community has produced some excellent tooling to abstract secret storage and encryption. However there are issues with the ecosystem of tools which leverage these abstractions to perform the cryptographic functions.

• Most of the existing integrations are for commercial services
• The FOSS options are difficult to operate in a secure manner

Modules Integrating Vault

Create an issue to have your integration module added to this list.

Authentication Strategies

• Token Authentication
• AppRole Authentication

Secret Engines

• Key Value
• AWS Dynamic Credentials

Encrypt-as-a-Service

• Transit Encryption