Integrating HashiCorp Vault with AWS

Name: Integrating HashiCorp Vault with AWS
Rating: 4.6 (241 reviews)

Learn how deploy, adopt, and integrate HashiCorp Vault with the AWS Cloud platform.

Created byBryan Krausen - 250,000+ Enrollments Worldwide

Last updated 12/2024

English

What you'll learn

Built by an AUTHORIZED HASHICORP INSTRUCTOR for Consul, Vault, and Terraform
How to deploy HashiCorp Vault on AWS
Integrate HashiCorp Vault with AWS services
Learn alongside a HASHICORP AMBASSADOR who has consulted on Vault for over 5 years
Use AWS services to secure HashiCorp Vault
How to configure Vault to generate dynamic secrets

Course content

10 sections • 26 lectures • 2h 26m total length

Course Introduction5:22
General introduction to the course, discussion about the topics included, and how it will be laid out.
Course Reviews0:23
Introduction to AWS Integrations2:19
Introduction to the lectures for the course
Deploying Vault on AWS2:38
Learn the different ways that you can easily deploy Vault on AWS
Integrating Vault with AWS services2:02
Learn about the different services you might use when deploying Vault on AWS
Demo - General Integrations6:49
In this demo, we'll look at the Vault cluster I've deployed in AWS and look at some of the integrations that I'm using throughout AWS to ensure the Vault cluster is secure and integrated with other AWS services.
Using IAM Roles for Vault3:50
In this lecture, students will learn how to use IAM roles with Vault to provide Vault access to native AWS services without having to provide Vault with static credentials.
Using the AWS Load Balancer Service1:37
In this section, students can expect to learn about using the AWS Load Balancer service to front-end Vault and how to use health checks to ensure traffic is sent to the Active node.
Security with Security Groups8:03
This lecture will discuss using security groups to protect traffic for Vault and Consul nodes.

Dynamic Credentials for AWS6:01
This lecture will walk through the AWS secrets engine and the different types of methods that can be used.
Demo - Dynamic Secrets for AWS (iam_method)14:51
In this demo, we'll start by configuring the AWS secrets engine using the iam_method, show how to generate dynamic credentials, and finally, how to revoke dynamic credentials. We'll also walk through how to rotate credentials that Vault is using to access the AWS platform.
Demo - Dynamic Secrets for Cross-Account AWS Access (assume_role)9:47
We'll walk through this demo by configuring the AWS secrets engine for cross-account access using the assumed_role method. We will configure AWS resources, configure the AWS secrets engine, and generate and test the dynamic credentials.

Logging and Alerting with CloudWatch Logs3:53
In this lecture, students will learn how to use CloudWatch Logs to monitor HashiCorp Vault and some of the rules and alarms that you might want to know about during day-to-day operations.
Demo - Logging and Alerting with CloudWatch Logs17:48
In this demo, students will learn how to use CloudWatch Logs along with configuring metrics and alarms to monitor HashiCorp Vault. Services used in the demo include Vault Audit devices, CloudWatch Logs Agent, CloudWatch Logs Log Group, Metrics, Alarms, and SNS for notifications.

Using a VPC Endpoint with Vault2:05
In this section, students can expect to learn how a VPC endpoint can increase the security of your Vault deployment.
Demo - AWS KMS and VPC Endpoint Integration6:16
In this demonstration, students will learn how to configure Vault to use the KMS service to auto unseal the service using a KMS key. The demo also walks students through how to configure a KMS VPC Endpoint for Vault to use for auto unseal.

Dynamic Secrets with the Database Secrets Engine5:07
In this lecture, students will understand how the Database secrets engine works, how to configure it, and best practices around generating dynamic secrets against a database.
Demo - Database Secrets Engine with Amazon RDS (Dynamic Secrets)13:45
In this demo, students will learn how to enable and configure the database secrets engine with RDS. The demo will walk students through rotating the root credentials and generating and revoking dynamic credentials against our RDS database.

Demo - Integrated Storage Auto Snapshots with Amazon S38:09
In this demo, students will be shown how to configure the Integrated Storage Auto Snapshots feature and save the snapshots on Amazon S3 so snapshots are persisted to an external storage platform.
Course Review1:15
Leave a review to share how this course helped you learn new skills for your day-to-day job or certification, and update your rating to improve up-to-date content for future students.

Requirements

Basic Vault knowledge
Basic Familiarity with AWS Terminology and Services

Description

This course will teach students how to adapt and integrate HashiCorp Vault with the AWS Cloud platform through lectures and lab demonstrations. Based on HashiCorp Vault, students can expect to understand how to use HashiCorp Vault for application authentication, dynamic AWS secrets, as well as using tight integrations with many AWS services to deploy and operate a secure and highly-available service for their organization.

This course includes sections on a wide variety of Vault topics, including secrets engines, auth methods, audit devices, and how to use some of the most popular AWS services to deploy Vault on the AWS cloud platform. This course expands on my other courses but focuses specifically on integrations with AWS services. If you are deploying Vault on AWS, this is the course for you where you'll learn best practices and how to better secure your Vault environment.

About the Instructor

Your instructor for this course, Bryan Krausen, is highly-regarded as a Vault expert. He has taught over 100,000 students, including training some of the largest companies in the US. He has several other courses on Vault and has co-authored the book Running HashiCorp Vault in Production. Bryan holds multiple Vault certifications, including the HashiCorp Certified: Vault Associate certification and two additional partner certs, including HashiCorp Vault Advanced and HashiCorp Vault Expert.

Who this course is for:

Security Teams looking to deploy HashiCorp Vault in AWS
DevOps Engineers managing day-to-day operations of Vault hosted in AWS
Students looking to understand how to generate dynamic secrets using HashiCorp Vault

Integrating HashiCorp Vault with AWS

What you'll learn

Explore related topics

Course content

Introduction and Lecture9 lectures • 33min

Dynamic AWS Credentials for AWS3 lectures • 31min

Logging and Alerting with CloudWatch Logs2 lectures • 22min

Configuration the AWS Auth Method2 lectures • 9min

Using a VPC Endpoint for Vault Connectivity to AWS API2 lectures • 8min

Configuring IAM to use Vault for MFA2 lectures • 7min

Database Secrets Engine with Amazon RDS (Dynamic Secrets)2 lectures • 19min

Integrated Storage Auto Snapshots with Amazon S32 lectures • 9min

Using Cloud Auto-join with AWS Tags1 lecture • 8min

Bonus1 lecture • 1min

Requirements

Description

Who this course is for: