michnovka
michnovka
Programming language:PHP
2021-05-21 06:14:57
0
Q:

autouseal using awskms in vault

Mak083
Mak083
Code: PHP
2021-06-05 12:25:24 
/*AutoUnseal with AWS KMS
In your config file mention below line*/ 

seal "awskms" {}

#Set below environment Variables with values
##################VAULT ENVIRONMENT VARIABLES###########################
VAULT_API_ADDR=http:<URL:PORT>
VAULT_ADDR=http:<URL:PORT>
VAULT_AWSKMS_SEAL_KEY_ID=<YOUR_KMS_ID>
##################AWS ENVIRONMENT VARIABLES#############################
AWS_REGION=<YOUR_REGION>
AWS_ACCESS_KEY_ID=<YOUR_ACCESS_KEY>
AWS_SECRET_ACCESS_KEY=<YOUR_SECRET_KEY>

#Start the read from the config file

vault server -config <HCL CONFIG FILE NAME>
  
/* First time you need to unseal it so that it can migrate it from manual to autounseal*/
 vault operator unseal -migrate
0

Tags

Related

New to Communities?

Join the community