HashiCorp Vault

1. What is Vault

   Secrets management, identity-based access and encryption as a service.

2. Architecture

   Vault's storage backend, barrier, core and API components.

3. Seal/Unseal and Key Shares

   Shamir key shares, auto-unseal and the barrier.

4. Auth Methods

   Authenticating clients: tokens, AppRole, OIDC, Kubernetes, cloud IAM.

5. Tokens

   Token types, TTLs, accessors and renewal.

6. Policies

   ACL policies, paths and capabilities.

7. Secrets Engines

   KV, database, PKI, transit and cloud secrets engines.

8. Leases, Renewal and Revocation

   Dynamic secrets lifecycle with leases and revocation.

9. Identity

   Entities, aliases, groups and identity tokens.

10. Transit and Encryption as a Service

    Encrypting data in transit without storing it.

11. Audit Devices

    Request and response logging for compliance.

12. Storage and High Availability

    Integrated storage (Raft), HA clustering and replication.

13. Vault Agent and Proxy

    Client-side auto-auth, caching and templating.

14. Security Model

    Threat model and hardening practices.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

Source: endoflife.date