Addressing secret sprawl
To address the client’s secret sprawl, Insight implemented HashiCorp’s Vault™ offering. Vault consolidated and standardized secrets across the enterprise, meaning that employee access to applications and integrations would not be interrupted as their credentials would update across everything at once. Additionally, with Vault came the power to delimit credentials (set an expiration on them), providing extra protection in the case of breaches and helping eliminate some potential secret-zero scenarios.
Modernizing to tackle multiple challenges
The first step to modernizing this client’s security was providing a roadmap for HashiCorp® Vault adoption. Due to its sophisticated nature, Insight coordinated the different aspects of the client’s enterprise that would need to be adjusted to accommodate Vault smoothly. This included implementing multi-cluster Kubernetes and writing the necessary automation to provide seamless credential communication across the client’s integrations.