Which of the following is used for centralized secrets management, dynamic credentials, and rotation?

Which of the following is used for centralized secrets management, dynamic credentials, and rotation?

• A. Prometheus
• B. ELK Stack
• C. HashiCorp Vault
• D. Route 53

Answer: (C)

Centralized secrets management with on-demand, time-limited credentials and automated rotation is exactly what Vault provides. It acts as a single source of truth for secrets, offering centralized storage, access control, and auditing, while dynamic credentials are minted on demand for systems like databases and cloud services. These credentials have short leases; when the lease ends, Vault revokes or rotates them automatically, so exposure is minimized and no long-lived secrets linger. Vault also supports multiple authentication methods, policy-based access, and various secret engines, making it easy to manage who can request what and how. In practice, a client authenticates to Vault, Vault issues a credential with a limited TTL, and once the TTL expires, the credential is revoked, ensuring ongoing secure access. The other options focus on monitoring, logging, or DNS, not centralized secret management with dynamic credentials and rotation, so Vault is the best fit here.

Centralized secrets management with on-demand, time-limited credentials and automated rotation is exactly what Vault provides. It acts as a single source of truth for secrets, offering centralized storage, access control, and auditing, while dynamic credentials are minted on demand for systems like databases and cloud services. These credentials have short leases; when the lease ends, Vault revokes or rotates them automatically, so exposure is minimized and no long-lived secrets linger. Vault also supports multiple authentication methods, policy-based access, and various secret engines, making it easy to manage who can request what and how. In practice, a client authenticates to Vault, Vault issues a credential with a limited TTL, and once the TTL expires, the credential is revoked, ensuring ongoing secure access. The other options focus on monitoring, logging, or DNS, not centralized secret management with dynamic credentials and rotation, so Vault is the best fit here.