HashiCorp Vault helps organizations make the transition from static, legacy data centers to managing secrets and protecting data in the cloud. Vault addresses two critical challenges: securely storing, controlling, and safeguarding secrets and protecting sensitive data and encryption keys. Vault defines a secret as anything that can be used for authentication or access to systems and applications within an organization, including tokens, passwords, certificates, and encryption keys. Identifying who has access to what secrets and systems and locating where these secrets are currently stored is critical for running applications in the cloud. Vault provides a way to centrally store, access, and distribute dynamic secrets. Leveraging short-lived dynamic secrets, Vault reduces the risk of a breach by making it easy to rotate and revoke credentials both on-demand and in an automated way. For sensitive data, Vault encrypts it both at-rest and in transit using high-level cryptographic protocols. This eliminates the need to set up expensive key management solutions and provides a single, consistent encryption standard across the organization.

Vault Open source is aimed at individuals and addresses the technical complexity of providing one workflow to connect any service. Vault Enterprise is aimed at teams and organizations and addresses the organizational complexity of collaboration and governance.

For information about Vault Enterprise please contact aws-marketplace@hashicorp.com.