Terraform & HashiCorp Vault

Here are the key actions for Terraform HashiCorp Vault:

Request LDAP access to Vault through the group assignment portal - Access to Vault is completed at this point.

Create a new secret folder in KV2 (Key-Value version 2) for the specific use case

Generate a new API key in the target service (e.g., Datadog)

Store the API key in the Vault secret path you created

Configure your Terraform configuration to fetch the secret dynamically from Vault during runtime

Ensure that we have the necessary Vault binary and environment variables set up

Use the Vault CLI to authenticate and verify your access before integrating with Terraform

The primary goal is to securely store and retrieve secrets without hardcoding them in your Terraform code or exposing sensitive information in version control.