DEV Community

Discussion on: Dynamically Securing Databases using Hashicorp Vault

Collapse
 
v6 profile image
πŸ¦„N BπŸ›‘ • Edited

// , The metaphor I like to use for Vault Tokens is a session token for web applications.

While the token itself may not be all that special, security-wise, a user can only get the Vault Token by doing whichever song and dance you've set up for login.

And that token is time-limited, auditable, tied to a specific range of IP addresses, and specific to each client.