openbao/openbao
Openbao
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
Features
- Secrets Management Platforms - Centralized platform to store, manage, and distribute secrets, certificates, and keys with encryption and access control.
- Encrypted Key-Value Stores - Stores arbitrary key-value pairs encrypted before writing to persistent storage for secure retrieval.
- Policy-Based Access Control - Restricts user and machine access to secrets using path-based rules for fine-grained permissions.
- Transit and At-Rest Encryption - Provides centralized encryption for data both in transit and at rest with managed key rotation.
- Secret Storage - Stores encrypted key-value pairs securely, preventing raw storage access from reading secrets.
- Dynamic Secret Engines - Generates short-lived, on-demand credentials for databases and Kubernetes with automatic revocation.
- Dynamic Secret Management - Creates on-demand credentials for databases and Kubernetes and automatically revokes them when the lease expires.
- Federated Identity Brokers - Merges identities across providers and uses a single access control system to broker access to secrets and systems.
- Lease Management Systems - Assigns leases to secrets and automatically revokes them at expiration with renewal APIs.
- Secret Rotation Systems - Automatically generates new values for stored secrets and updates them across all consuming systems.
- Revocations - Invalidates previously issued secrets so they can no longer be used to access protected resources.
- Audit Logging Systems - Logs every request and response to configurable audit devices for compliance and forensics.
- Audit Logs - Logs every request and response to a configurable audit device for compliance monitoring and forensic analysis.
