Everything registered · Published by Legra
Keep secrets and protected values under explicit controls. Manage their metadata, versions, rotation, and recovery while recording the authority under which each operation takes place.
Vault
Govern secrets, their versions, and the operations allowed to use them.
Manage governed secrets
Separate use from reveal
A task may need a credential to contact an external service. Authorize that operation to use the required secret version without granting the person starting it permission to reveal the value.
Follow versions and changes
Bind work to a specific secret version where the credential must stay fixed. Rotate credentials deliberately and retain the evidence of creation, use, reveal, and recovery operations.
Assign the required permissions
Metadata administration, secret creation, use, and reveal are distinct powers. Enabling Vault grants none of them automatically. Identity and access explains authorization; purpose-bound access describes permitted uses and terms.