Secret management integration (Vault, Secrets Manager) in Terraform - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main purpose of secret management tools like Vault or Secrets Manager?

They securely store, manage, and control access to sensitive information such as passwords, API keys, and certificates.

intermediate

How does HashiCorp Vault protect secrets?

Vault encrypts secrets before storing them and controls access through policies and authentication methods.

intermediate

In Terraform, how do you typically retrieve a secret from AWS Secrets Manager?

By using the data source `aws_secretsmanager_secret_version` to fetch the secret value during Terraform runs.

beginner

Why should secrets not be hardcoded in Terraform configuration files?

Hardcoding secrets risks accidental exposure in version control and logs, reducing security.

intermediate

What is a common method to authenticate Terraform with Vault?

Using a Vault token or AppRole authentication to securely access secrets during Terraform runs.

Which Terraform resource is used to fetch a secret from AWS Secrets Manager?

A aws_secretsmanager_secret_version

B aws_secret

C aws_vault_secret

D aws_secret_manager

The correct data source is aws_secretsmanager_secret_version to retrieve secret values.

What does Vault use to control access to secrets?

A Roles only

B Buckets

C Groups

D Policies

Vault uses policies to define who can access which secrets.

Why is it important to avoid storing secrets directly in Terraform files?

A Terraform does not support secrets

B It can cause syntax errors

C It risks exposing secrets in version control

D It slows down Terraform runs

Storing secrets in code risks accidental exposure in repositories.

Which authentication method is commonly used by Terraform to access Vault?

A AppRole

B OAuth

C SAML

D LDAP

AppRole is a common method for Terraform to authenticate with Vault.

What is a key benefit of using a secret manager service?

A Automatic code generation

B Centralized and secure secret storage

C Faster application deployment

D Reduced cloud costs

Secret managers provide centralized, secure storage and access control for secrets.

Explain how Terraform integrates with Vault or AWS Secrets Manager to manage secrets securely.

Think about how Terraform reads secrets at runtime without exposing them.

Describe best practices for secret management in cloud infrastructure using Vault or Secrets Manager.

Consider security and operational practices to keep secrets safe.