Secrets and Certificate Management at Scale

<p>Hardcoded database passwords and manually-issued certificates that nobody tracks are two of the most common causes of production incidents and breaches. This course follows a platform engineer at a payments startup replacing a years-old shared database password with HashiCorp Vault's dynamic secrets engine, injecting short-lived credentials into running services without ever baking them into images or environment variables, and building an internal PKI with Vault and cert-manager so certificates renew themselves automatically, long before a 2am expiration outage can happen.</p>

Tools: hashicorp vault, secrets management, pki, cert-manager, tls rotation