Nick Santamaria - Can You Keep a Secret? - DrupalSouth 2017 - Vault

Every Drupal application has its secrets - and I don’t mean that dodgy code you wrote during an all-nighter. Database credentials, API keys, personally identifiable information - a secret is any data which could cause harm to your organisation if exposed.

This session will introduce the concepts of secrets and secret management, before moving onto practical examples of securely storing secrets in Drupal.

Who should attend this session?

This session is aimed at mid-to-senior Developers, operations engineers, and site builders looking to improve the security posture of their projects.

What takeaways can attendees expect?

A conceptual understanding of secret management and its advantages.
Ability to leverage Key module to securely store secrets in Drupal.
An overview of the major secret management tools currently in the marketplace, including Amazon KMS and Hashicorp Vault.
Resources to kick-start your journey to secure Drupal applications.

Drupal is a registered trademark of Dries Buytaert.