Course · Intermediate

Secrets management

Inventory, store, issue with a bounded lifetime, revoke under incident and detect a leak, with Vault as the implementation

8 modules
28 lessons
26 quizzes
16h

Start Lesson: Secrets management: from inventory to leak response

Recommended before you start: Linux

About this path · first module: 3 lessons, about 1 week

Welcome to your Secrets management path. This page lists the whole course, in the order in which the ideas build on one another: recognise and inventory the secrets of a system, follow their lifecycle, put them in a vault with scoped access, replace the permanent password with a dynamic secret that expires, remove the shared secret in favour of a machine identity, then detect a leak and respond to it.

A last, optional module is for whoever runs the vault itself: installation, sealing, backups, monitoring, edition and licence.

Yes, it is a long path. Nobody follows it in one go. The first module, "Ce qu'est un secret, et ce qu'il coûte", is 3 lessons of about 35 minutes: at one per working day, 1 week is enough, and you can already put it to use. Each module gives you a skill you can use the next day, and your progress waits for you in this browser and on the devices linked to your optional account.

Reach a goal

This topic path gathers all our content on the domain. Your personal path may only use part of it.

Skills 7 (+2 in part) 7 by quiz · 0 in a lab · 1 with a proof
Jobs DevSecOps Engineer CI/CD Engineer Platform Engineer

Progress 0 / 28 (0%)

Knowledge Not measured Your first quiz will show up at the end of a lesson.
Practice Not measured Labs measure what you can do. You do not need DSOXLab to start a course.
Proof Not measured Challenges and hands-on exams check that you can act without step-by-step instructions.

Tick lessons here, or with “Mark as read” at the end of each lesson. Progress stays in this browser; nothing is sent to the server unless you link this browser to an optional account.

01 Présentation 0 / 1
- lesson Secrets management: from inventory to leak response 10 min
02 Ce qu'est un secret, et ce qu'il coûte 0 / 3
03 Le cycle de vie, et le chiffrement qui le protège 0 / 3
04 Un coffre, et des accès scopés 0 / 5
05 Des secrets qui expirent d'eux-mêmes 0 / 3
06 Supprimer le secret partagé 0 / 3
07 Détecter une fuite, et y répondre 0 / 4
08 Opérer un coffre en production 0 / 6