Thycotic, provider of privileged access management (PAM) solutions to more than 10,000 organizations worldwide, including 25 of the Fortune 100, announced the latest release of its PAM solution for DevOps, DevOps Secrets Vault, that will help businesses secure machines, applications, and databases in DevOps environments.
As the remote world continues to push businesses online in almost every capacity, IT teams need to centrally manage passwords used to access applications and services without causing friction in the development process. The latest enhancements to DevOps Secrets Vault offer new dynamic secrets support for databases, the ability to provide newly created machines and applications with one-time access to vaulted secrets, and a new integration with Azure DevOps.
“The database is the center of the DevOps environment with many applications requiring access, while at the same time, being a primary target of criminal hackers,” said Jai Dargan, VP of Product Management at Thycotic. “Dynamic secrets for databases is the answer to fight leaked credentials, standing access, and secrets rotation.”
Recommended AI News: Stefan Rust Launches Sonic Capital, Asia’s First Tokenized Venture Investment Fund
Just-in-Time Access for Databases
To eliminate friction in a DevOps workflow, privileged credentials or “secrets” must be created immediately when needed to spin up and access IT resources. In the absence of an automated solution, it’s common for busy IT administrators to forget to expire or disable these secrets, leaving risky standing access in place.
Just-in-time access ensures users and systems have appropriate access when needed and for the least amount of time required. When DevOps tools, applications, databases, or humans need to access a target, the vault generates dynamic secrets, which are short-lived secrets with fine-grained access control. Even if these secrets are leaked, any would-be attacker is limited in what they can do and has a limited window to do it before the secrets expire.
DevOps Secrets Vault supports dynamic secret creation for MySQL, PostgreSQL, Oracle (Standard and Enterprise), and Microsoft SQL with more databases to follow.
Recommended AI News: NetDragon’s Edmodo Selected as Exclusive Online Learning Platform in Ghana
Bootstrapping
Any machine or application that has just been created, or bootstrapped, must get access to the vault initially. DevOps Secrets Vault provides one-time use URLs for newly created machines or applications to access the tool and get the client secret.
Expanded Support for DevOps Tools and Languages
Utilizing DevOps Secrets Vault enables organizations to adopt enterprise-class secrets management for DevOps pipelines. The complexity and variety of tools within these pipelines requires centralized management of privileged access to maintain security, unify privileged access management, and control costs.
DevOps Secrets Vault now supports secrets access for Azure DevOps and includes a software development kit for Node.js. Thycotic is constantly adding to the list of SDKs and DevOps tool plug-ins, which already includes support for Jenkins, Kubernetes, Terraform, Chef, and Puppet.
Recommended AI News: Yagle Debuts a Groundbreaking, AI-Enabled, Digital Media Audit Tool
Copper scrap shipping Copper scrap management solutions Scrap metal handling equipment
Copper cable stripping machines, Metal waste collection solutions, Copper scrap buyer