...
Vault handles any type of secret data, including database credentials, API keys, PKI keys, and encryption keys.
Vault also supports dynamic secrets, generating credentials on-demand for fine-grained security controls.
- Vault can authenticate and authorize SSH keys and audit every request
Other Security aspects
Allowing Blob storage access only from internal network and specific VM's instead of using keys
Kibana, superset and yarn dashboard are accessibly only via VPN
Grafana is accessible from public internet. Only viewer credentials are shared with users