Vault is an identity-based secrets and encryption management system. A secret is anything that you want to tightly control access to, such as API encryption keys, passwords, or certificates. Vault provides encryption services that are gated by authentication and authorization methods. Using Vault’s UI, CLI, or HTTP API, access to secrets and other sensitive data can be securely stored and managed, tightly controlled (restricted), and auditable.

The key features of Vault are:

• Secure Secret Storage
• Dynamic Secrets
• Data Encryption
• Leasing and Renewal
• Revocation

• Secrets Management

• Dynamic Secrets

• Identity-based Access

• Database Credential Rotation