The Vault Transit secrets engine allows Vault to function as an encryption-as-a-service, encrypting and decrypting data stored outside of Vault.
In this track, you will use the Transit secrets engine with an Express-based web app and a NoSQL database (MongoDB). Using this web app we will perform encryption-as-a-service, more specifically, encrypting a user's password and storing it. We also perform decryption-as-a-service to check for a successful login on our application.
| Resource | Description |
|---|---|
| Platform | Instruqt |
| Documentation | Encryption as a Service - Demo Guide |
| Slides | Encryption as a Service - Presentation |
| Recording | Encryption as a Service - Recording |
| Internvault Repository | Encryption as a Service - Repository |
| Business Requirements | Encryption as a Service - Business Requirements |
| Contributors | Anthony Benjamin, Syed Quadri, George Abot |
-
New content requests: Field Request form (use the Asset request type)
-
On Slack: #proj-instruqt for Instruqt questions and issues
-
For access to HashiCorp Instruqt content, create an Instruqt account with your HashiCorp e-mail, then use the
/instruqt_accessintegration in #proj-instruqt (see pinned messages for instructions) -
Issues with upcoming/in-progress workshops/demos: tag @team-innovation-lab in #proj-instruqt (note that outside of US hours response may not be immediate at this time)
-