The AHEAD HashiCorp Vault Service assists clients at the beginning of their Secrets Management journey to get started with HashiCorp Vault on AWS and deploy a Production Ready environment ready to integrate into their existing environment.

Scope During this Service, AHEAD will perform the following tasks in a phased approach:

Design & Deployment

During this Service, AHEAD will perform the following:

• Work with Client stakeholders to develop an architectural design and build a backlog of activities required to execute the HashiCorp Vault Platform on AWS
• Deploy up to (2) Production Vault Clusters, and up to (2) Non-Production Vault Clusters using Consul or Vault Integrated Storage as the backend in up to (2) AWS Regions
• Configure Authentication Methods such as LDAP/AD as defined in the Design Phase
• Configure up to two (2) Vault Secrets Engine Use Cases such as (KV/Dynamic/PKI/K8s/DB) as defined in the design phase
• Implement Access Control List (ACL) policies for Vault administration and user/application access as defined in the Design Phase
• Configure Vault Auto-Unseal with AWS if applicable as defined in the design phase
• Configure Vault Audit Devices for logging as defined in the Design Phase

Deliverables The following deliverables are provided in connection with the Vault on AWS Service:

• Vault Architecture & High-Level Design Documentation
• Backlog of Vault Activities
• Design Questionnaire Documentation
• Pre-Installation Documentation
• Test & Acceptance Documentation