HashiCorp Vault Policy - Part 7 | HashiCorp Vault tutorials

▬▬▬▬▬▬ 🎉 🔥 Udemy Course - AWS Networking Zero to Hero!🔥 🎉▬▬▬▬▬▬
🚀 AWS Networking Masterclass! - https://www.udemy.com/course/aws-netw...

▬▬▬▬▬▬ 🎉 🔥 Udemy Course - Master Azure Like a Pro!🔥 🎉▬▬▬▬▬▬
🚀 Master Azure Like a Pro! - https://www.udemy.com/course/azure-cl...

▬▬▬▬▬▬ 🙍🏻‍♂️Join YouTube Membership ▬▬▬▬▬▬
Join this channel to get access to perks:
   / @rahulwagh  

▬▬▬▬▬▬ 🙍🏻‍♂️ Members Only Videos ▬▬▬▬▬▬
Member Only videos -    • Members-only videos  

▬▬▬▬▬▬ 🗓️ Book Me for Consultation ▬▬▬▬▬▬
Calender - https://tidycal.com/rahulwagh17

To learn more on DevOps visit - https://jhooq.com/

Part 1 (HashiCorp Vault Installation) -    • HashiCorp Vault Installation - Part 1 | Ha...  
Part 2 (HashiCorp Vault Start and Stop in Development mode) -    • HashiCorp Vault Start and Stop in Developm...  
Part 3 (HashiCorp Vault Read Write and Delete secrets) -    • HashiCorp Vault Read Write and Delete secr...  
Part 4 (HashiCorp Vault Secret Engine and Secret Engine path) -    • HashiCorp Vault Secret Engine and Secret E...  
Part 5 (HashiCorp Vault Dynamic Secrets generation) -    • HashiCorp Vault Dynamic Secrets generation...  
Part 6 (HashiCorp Vault Token Authentication & GitHub Authentication) -    • HashiCorp Vault Token Authentication & Git...  
Part 7 (HashiCorp Vault Policy) -    • HashiCorp Vault Policy - Part 7 | HashiCor...  
Part 8 (HashiCorp Vault Deploy Vault, HTTP API & UI ) -    • HashiCorp Vault Deploy Vault, HTTP API & U...  

HashiCorp vault is a tool for managing encryption and secrets. This is a HashiCorp tutorial series where we will start from the very basic HashiCorp installation and will go all the way by running the vault in production mode.

In this session we will be taking a more deeper look onto HashiCorp vault policy. Here are the topics we will be covering during the session -
1. What is HashiCorp vault policy
2. How to create Policy
3. What is Policy format
4. How to apply policy
5. Attach Vault policy with role
6. Generate access_id and secret_id for vault policy

▬▬▬▬▬▬ ⭐️ CLI command for handling vault policy⭐️ ▬▬▬▬▬▬

1. List vault policies
$ vault policy list

2. Write your custom policy
$ vault policy write my-policy - EOF
Dev servers have version 2 of KV secrets engine mounted by default, so will
need these paths to grant permissions:
path "secret/data/*" {
capabilities = ["create", "update"]
}

path "secret/data/foo" {
capabilities = ["read"]
}
EOF


3. Read Vault policy details
$ vault policy read my-policy

4. Delete Vault policy by policy name
$ vault policy delete my-policy

5. Attach token to policy
$ export VAULT_TOKEN="$(vault token create -field token -policy=my-policy)"


6. Associate auth method with policy
$ vault write auth/approle/role/my-role \
secret_id_ttl=10m \
token_num_uses=10 \
token_ttl=20m \
token_max_ttl=30m \
secret_id_num_uses=40 \
token_policies=my-policy

7. Generate and Export Role ID
export ROLE_ID="$(vault read -field=role_id auth/approle/role/my-role/role-id)"

8. Generate and Export Secret ID
export SECRET_ID="$(vault write -f -field=secret_id auth/approle/role/my-role/secret-id)"

▬▬▬▬▬▬ ⭐️ Follow me ⭐️ ▬▬▬▬▬▬

Instagram -   / wagh.rahul17  
Twitter -   / wagh_rahul  

To learn more on DevOps visit - https://jhooq.com/

Disclaimer/Policy: All the content/instructions are solely mine. The source is completely open-source.

Video is copyrighted and can not be re-distributed on any platform.