# Secrets Management

> Every post tagged “Secrets management”.

## Contents

- [How to reduce code dependency with Vault Agent](https://mehdilaruelle.com/posts/2021/02/how-to-reduce-code-dependency-with-vault-agent/index.md): Use Vault Agent to keep HashiCorp Vault out of your application code: auto-auth, templates and a cached token, with an AppRole example on Docker.
- [Migrate your application secrets in Vault (step 3)](https://mehdilaruelle.com/posts/2019/03/migrate-your-application-secrets-in-vault-step-3/index.md): Encrypt and decrypt your application's data with HashiCorp Vault, without the application ever holding a key. Step 3 of the Vault migration series.
- [Migrate your application secrets in Vault (step 2)](https://mehdilaruelle.com/posts/2019/03/migrate-your-application-secrets-in-vault-step-2/index.md): Replace a static database password with credentials HashiCorp Vault generates on demand and expires on its own. Step 2 of the Vault migration series.
- [Migrate your application secrets in Vault (step 1)](https://mehdilaruelle.com/posts/2019/03/migrate-your-application-secrets-in-vault-step-1/index.md): Move the secrets out of your application's configuration into HashiCorp Vault, with Terraform and without touching the code. Step 1 of the series.
- [HashiCorp Vault Authentication Methods: How to Choose the Right Auth Backend](https://mehdilaruelle.com/posts/2018/09/how-to-choose-your-authenticate-method-with-vault/index.md): Every HashiCorp Vault authentication method compared: Token, AppRole, LDAP, TLS certificates, AWS, Azure, GCP, Kubernetes and which one fits which case.

---

Originally published at https://mehdilaruelle.com/tags/secrets-management/