HashiCorp Vault

Connect HashiCorp Vault to access secrets management and access policies through Cendriix agents.

Overview

How to connect

1. Navigate to Settings → Integrations → Connectors
2. Click Connect on the HashiCorp Vault integration
3. Enter your HashiCorp Vault API token
4. Once configured, security data becomes available

Getting your API token

1. Generate a Vault token via CLI: vault token create -policy=read-only
2. Copy the token and paste it in the Cendriix setup wizard

Capabilities

Once connected, Cendriix agents can:

• Read secret metadata (not values) and mount configurations
• Access policy definitions
• Reference secrets management context for security reviews

Security notes

• Use scoped tokens with read-only permissions
• Tokens are stored encrypted in AWS Secrets Manager
• Disconnect at any time from Settings → Integrations → Connectors

Further reading

• HashiCorp Vault API Documentation