I presented this talk at HashiConf Global in 2021 and always intended to write it as a blog, finally getting around to it. In this blog post, we will discuss how HashiCorp Vault and HashiCorp Waypoint can be used together to manage secrets during application deployment. In addition to secret management, Vault provides excellent auditability, which can help with tracking down who used what secret and meeting compliance requirements. Understanding Secrets and Ephemeral Credentials A secret is a piece of sensitive information, such as API keys, passwords, or certificates, that should be kept confidential and secure.