Skip to main content

Secret Engine

A Secret Engine is the component that manages and stores Secrets inside a Vault Instance. Each Vault Instance can hold multiple Secret Engines, and each one stores its Secrets in Key/Value format at its own mount point.

Overview​

  • Mount point: each Secret Engine has its own mount point, so Secrets in one Secret Engine stay isolated from Secrets in another.
  • Contents: a Secret Engine holds one or more Secrets in Key/Value format.
  • Access control: a Policy scopes which Secret paths inside a Secret Engine a user or application can read, write, or delete.
  • Lifecycle: deleting a Secret Engine also deletes every Secret stored inside it. See Delete a Secret Engine before you delete one.

See also​