Encrypting Data while Preserving Formatting with HashiCorp Vault

Vault 1.4 introduced new feature called Transform. Transform is a Secrets Engine that allows Vault to encode and decode sensitive values residing in external systems such as databases or file systems. This capability allows Vault to ensure that when an encoded secret’s residence system is compromised, such as when a database is breached and its data is ex-filtrated, that those encoded secrets remain uncompromised even when held by an adversary.

This videos shows you how to implement Transform secrets into a simple API, source code is provided for both the Java and Go programming languages.

Contents:
0:00 Introduction
0:30 What is the Vault Transform Engine?
1:50 Enabling Vault Transform
3:00 Configuring a Role
3:20 Defining the Transform
4:05 Tweak Source Defined
5:00 Defining the Template
6:27 Creating an Alphabet
7:00 Vault Transform Demo using the CLI
8:33 Vault Transform in a Java Application
12:05 Vault Transform in a Go Application

Source Code:
https://github.com/nicholasjackson/demo-vault/tree/master/transform -

If you liked this video and want to see more from HashiCorp, subscribe to our channel: https://www.youtube.com/c/HashiCorp?sub_confirmation=1

To learn more, visit our hands-on interactive lab environment, HashiCorp Learn: https://learn.hashicorp.com/

HashiCorp is the leader in multi-cloud infrastructure automation software. The HashiCorp software suite enables organizations to adopt consistent workflows to provision, secure, connect, and run any infrastructure for any application. HashiCorp open source tools Vagrant, Packer, Terraform, Vault, Consul, Nomad, Boundary, and Waypoint are downloaded tens of millions of times each year and are broadly adopted by the Global 2000. Enterprise versions of these products enhance the open source tools with features that promote collaboration, operations, governance, and multi-data center functionality.

For more information, visit: www.hashicorp.com or follow us on social media:
Twitter: @hashicorp
LinkedIn: https://www.linkedin.com/company/hashicorp
Facebook: https://www.facebook.com/HashiCorp