by Angela Guess
A recent press release reports, “HashiCorp, a leader in cloud infrastructure automation, today released HashiCorp Vault 0.9 with significant updates to both the open source and enterprise versions centered around identity and governance. Updates include an identity store to enable privileged access management across multiple identity providers, auto-unseal for AWS Key Management Service (KMS) and Google Cloud Platform (GCP) KMS, FIPS 140-2 compliance, and deeper integration with Sentinel, HashiCorp’s new policy as code framework. ‘HashiCorp Vault is critical in protecting and managing secrets in our highly distributed environment — for authorization and other sensitive data,’ said Jay Christopherson, principal engineer, DevOps, Spaceflight. ‘With the addition of Vault being FIPS 140-2 compliant, it not only changes how we manage policies and access in secure environments, it adds compliance that allows us to operate securely in the federal space’.”
The release goes on, “Vault is broadly used among the Global 2000 to address the challenge of infrastructure and application security in distributed environments. The Vault open source product addresses core security use cases for secrets management, encryption as a service, and privileged access management. Vault Enterprise enables teams and organizations to extend Vault with collaboration and operations features, provide governance capabilities, and scale Vault across multiple data centers. Vault 0.9 introduces several new features and functionality to improve operations around identity and policy management: (1) Entities: Entities tie clients into a long-lived logical identity that can be more easily managed. Clients can associate their logical identity with multiple identity services, making access control and auditing much simpler. (2) Identity Groups: Group support allows multiple entities to be managed as a group, simplifying role-based access control. Groups can be members of other groups, allowing for better organizational modeling and management.”
Read more at Business Wire.
Photo credit: HashiCorp