Skip to main content

Key Vault overview

FPT Key Vault is a service for storing confidential data — credentials, tokens, and configuration — outside your application code. A Vault Instance holds one or more Secret Engines, each of which stores versioned Secrets in Key/Value format. Policies and Auth Methods then control which users or applications can reach those Secrets.

What you can do with Key Vault​

  • Create a Vault Instance and add Secret Engines to organize Secrets by application or environment.
  • Store Key/Value Secrets with built-in versioning, so you can track and roll back changes to a value.
  • Define Policies that scope exactly which Secret paths a user or application can read, write, or delete.
  • Set up an AppRole Auth Method and Role so applications authenticate themselves (machine-to-machine) instead of using a personal login.

Key Vault helps your team keep confidential configuration out of source control and application code, while giving you fine-grained control over who — or what — can access it.

Next steps​