Zero Trust RabbitMQ with HashiCorp Vault | Rob Barnes | RabbitMQ Summit 2022
Zero Trust RabbitMQ with HashiCorp Vault | Rob Barnes - Senior Developer Advocate at Hashicorp
ABSTRACT
Securing RabbitMQ in a Zero Trust environment has multiple layers that need consideration. The first is implementing the principle of least privileged access to RabbitMQ, and the second is ensuring the confidentiality and integrity of application data. Both of which are difficult challenges to solve and introduce substantial operational overheads. In this demo-driven talk, I will show how you can use HashiCorp Vault to offset the operational overhead of Identity and Access Management. I will also show you how you can use HashiCorp Vault’s API to implement a simple workflow that offsets the complexity of cryptography to Vault. By the end of this talk, you will learn how to configure Vault using Terraform to broker application identity on behalf of RabbitMQ and refactor a simple Go application to implement this authentication workflow. You will also learn how to implement symmetric and asymmetric encryption of your application data before placing it on RabbitMQ message queues.
• Follow us on social:
Twitter: / rabbitmqsummit
LinkedIn: / code-sync
• Looking for a unique learning experience?
Attend the next Code Sync conference near you!
See what's coming up at: https://codesync.global
