KeyConnector
KeyConnector is a Docker image associated with each project, designed to execute API requests within the client environment. It is equipped with the capability to securely connect to secret stores, retrieve secrets, and process requests while ensuring the confidentiality of sensitive information. KeyConnector can redact any predefined sensitive data as configured by tenant or project administrators.
Features and Capabilities
Execution Environment: KeyConnector operates within the client environment, ensuring requests are processed securely and efficiently.
Integration with Secret Stores: It seamlessly connects to various secret stores such as HashiCorp Vault, AWS Secrets Manager, Google Secret Manager, and Azure Key Vault to fetch necessary credentials and other sensitive data.
Redaction of Sensitive Information: Tenant and project administrators can configure KeyConnector to redact sensitive information from request outputs, ensuring compliance with security policies and regulations.
Usage
To utilize KeyConnector effectively within your project:
Deployment: Deploy the KeyConnector Docker image within your environment.
Configuration: Configure KeyConnector with necessary access credentials and settings to connect to your secret stores.
Execution: Execute API requests securely using KeyConnector, which will handle the retrieval of secrets and processing of requests while ensuring the redaction of sensitive information as per predefined policies.
Security and Compliance
KeyConnector enhances security and compliance by:
- Redacting sensitive information based on preconfigured rules.
- Using secure connections to secret stores for fetching credentials.
- Operating within the client's environment to maintain data integrity and confidentiality.
Learn More
For detailed setup instructions and advanced configurations, refer to the documentation provided by your project or tenant administrators.
This section outlines the capabilities and importance of KeyConnector, ensuring secure and efficient execution of API requests while safeguarding sensitive information.