Get Those Secrets Out of State!

Description

Terraform 1.10 introduced ephemeral values, providing a way to securely manage your sensitive data in Terraform without writing it to state or storing it in your plan files. In this session, I'll walk through what ephemeral values are, how to leverage them in your configuration, and some gotchas on their use. We'll start by examining how secrets end up in state. Then we'll explore existing approaches to handling secrets. Finally, we'll make use of Vault to securely store and retrieve secrets through ephemeral values and write-only arguments. By the end of the talk, you'll be ready to remediate your existing configurations and get those secrets out of state! Speaker: Ned Bellavance X: https://twitter.com/Ned1313 Subscribe to our YouTube Channel → https://www.youtube.com/c/HashiCorp?sub_confirmation=1 For hands-on interactive labs, visit HashiCorp Developer → https://developer.hashicorp.com/ HashiCorp, an IBM company, helps organizations automate hybrid cloud environments with Infrastructure and Security Lifecycle Management. HashiCorp offers The Infrastructure Cloud on the HashiCorp Cloud Platform (HCP) for managed cloud services, as well as self-hosted enterprise offerings and community source-available products. For more information, visit hashicorp.com. For more information → https://hashicorp.com LinkedIn → https://linkedin.com/company/hashicorp X → https://x.com/HashiCorp Facebook → https://facebook.com/HashiCorp