Understanding secret engines and where secrets are stored

In the context of HashiCorp Vault, a secret engine is a component that handles the secure storage, generation, or encryption of secrets. They are called engines because they are plug and play, allowing users to enable different methods of managing secrets according to their requirements.

There’s not typically a component specifically referred to as secret engines in the sense of them being hidden or undisclosed. Rather, these engines provide various interfaces to manage secrets in Vault, and they are well-documented and transparent in their functionality. Let’s briefly explore a few popular engines that will help you understand what might be appropriate for your type of secret in the future:

• Key Value (KV) secrets engine: This is a secure and encrypted key-value store. It’s like a secure version of Redis or Memcached. You can store arbitrary data, such as passwords, API keys, or arbitrary text...