🔐

Vault Learning Roadmap

Secrets management, dynamic credentials, and encryption as a service.

Estimated time:3–5 weeks

1🌱

Phase 1 — Fundamentals

KV secrets engine

Authentication methods (token, AppRole)

Policies (HCL-based access control)

Seal/unseal & Shamir secret sharing

2🔄

Database secrets engine (dynamic DB creds)

AWS/Cloud secrets engines

Lease renewal & revocation

PKI secrets engine (short-lived certs)

3🔌

Kubernetes auth method

Vault Agent / sidecar injection

Transit engine (encryption as a service)

CI/CD integration for secret retrieval

4🔐

important

High availability & storage backends (Raft, Consul)

Auto-unseal (cloud KMS)

Audit logging

Disaster recovery replication

Begin with interview questions to assess your current level.