AHEAD HashiCorp Vault on AWS Implementation

The AHEAD HashiCorp Vault Service assists clients at the beginning of their Secrets Management journey to get started with HashiCorp Vault on AWS and deploy a Production Ready environment ready to integrate into their existing environment.

Scope During this Service, AHEAD will perform the following tasks in a phased approach:

Design & Deployment

During this Service, AHEAD will perform the following:

• Work with Client stakeholders to develop an architectural design and build a backlog of activities required to execute the HashiCorp Vault Platform on AWS
• Deploy up to (2) Production Vault Clusters, and up to (2) Non-Production Vault Clusters using Consul or Vault Integrated Storage as the backend in up to (2) AWS Regions
• Configure Authentication Methods such as LDAP/AD as defined in the Design Phase
• Configure up to two (2) Vault Secrets Engine Use Cases such as (KV/Dynamic/PKI/K8s/DB) as defined in the design phase
• Implement Access Control List (ACL) policies for Vault administration and user/application access as defined in the Design Phase
• Configure Vault Auto-Unseal with AWS if applicable as defined in the design phase
• Configure Vault Audit Devices for logging as defined in the Design Phase

Deliverables The following deliverables are provided in connection with the Vault on AWS Service:

• Vault Architecture & High-Level Design Documentation
• Backlog of Vault Activities
• Design Questionnaire Documentation
• Pre-Installation Documentation
• Test & Acceptance Documentation