Why You Should Be Using Ephemeral Credentials
In this post, we explore ephemeral credentials in Hashicorp Vault. And, we run through what implementation looks like. Keeping critical information protected should be at the heart of everything you do as a developer (beyond making sure the thing you’re developing actually works, of course). For many businesses, this means ensuring that your application or product is secure on all fronts. Secure connections. Secure platforms. And, perhaps most importantly, secure secrets. When we talk about secrets, we’re not talking about the time you stole a piece of gum from the corner store when you were four or that time your brother snuck out of the house. We’re talking about bigger things than that. Important things. Secrets are sensitive data that live within your system that require credentials to access. They can be anything from usernames and passwords to SSH keys and just about everything in between. It’s all the critical information that you don’t just want to keep safe, you need to keep i
Team Liatrio Keeping critical information protected should be at the heart of everything you do as a developer (beyond making sure the thing you’re developing actually works, of course). For many businesses, this means ensuring that your application or product is secure on all fronts. Secure connections. Secure platforms. And, perhaps most importantly, secure secrets. When we talk about secrets, we’re not talking about the time you stole a piece of gum from the corner store when you were four or that time your brother snuck out of the house. We’re talking about bigger things than that. Importa
related reading
- Infisical | The modern security platform for developers and agentsinfisical.com
- How to Manage GitHub Actions Secretsinfisical.com
- Why We Don’t Trust the Database With Authentication – Sturdy Statisticsblog.sturdystatistics.com
- Digital hygiene – karpathykarpathy.bearblog.dev
- Doing much better than your .env file | Mediummedium.com
- Valid Accounts, Technique T1078 - Enterprise | MITRE ATT&CK®attack.mitre.org
- Keyhive: Local-first access controlinkandswitch.com
- Secure AI Agent & User Authentication | Auth0auth0.com
- The Seven Types of Non-human Identities to Securecyberark.com
- What Are Non-Human Identities and Why Do They Matter?resilientcyber.substack.com
- Report: Identity Crisis: The Biggest Prize in Security | A Contrary Research Deep Dive | Contrary Researchresearch.contrary.com
- Andrej Karpathy on X: "I wrote a quick new post on "Digital Hygiene". Basically there are some no-brainer decisions you can make in your life to dramatically improve the privacy and security of your computing and this post goes over some of them. Blog post link in the reply, but copy pasting below https://t.co/gRyeVouko5" / Xx.com