---
# The name of your project
title: Spring Vault
badges:
# Specify your project's twitter handle, if any. Delete if none.
twitter: SpringCentral
# Customize your project's badges. Delete any entries that do not apply.
custom:
- name: Source (GitHub)
url: https://github.com/spring-projects/spring-vault
icon: github
- name: Issues (JIRA)
url: https://github.com/spring-projects/spring-vault/issues
icon: tracking
- name: CI (Bamboo)
url: https://travis-ci.org/spring-projects/spring-vault
icon: ci
- name: StackOverflow
url: http://stackoverflow.com/questions/tagged/spring-vault
icon: stackoverflow
---
{% capture parent_link %}
[Spring Vault]({{ site.projects_site_url }}/spring-vault)
{% endcapture %}
{% capture billboard_description %}
Spring Vault provides familiar Spring abstractions and client-side support for accessing, storing and revoking secrets. It offers both low-level and
high-level abstractions for interacting with Vault, freeing the user from infrastructural concerns.
With [HashiCorp's Vault](https://www.vaultproject.io) you have a central place to manage external secret data for applications across all environments.
Vault can manage static and dynamic secrets such as application data, username/password for remote applications/resources and provide credentials for external services such as MySQL, PostgreSQL, Apache Cassandra, Consul, AWS and more.
{% endcapture %}
{% capture main_content %}
## Features
* Connection package as low-level abstraction
* Reading, writing and deleting data from Vault with object mapping support
* Multiple authentication mechanisms: AppId, AppRole, AWS EC2, Client Certificates, and Cubbyhole (wrapped/stored token)
## Quick Start
{% include download_widget.md %}
#### Configure VaultTemplate
```java
@Configuration
class VaultConfiguration extends AbstractVaultConfiguration {
@Override
public VaultEndpoint vaultEndpoint() {
return new VaultEndpoint();
}
@Override
public ClientAuthentication clientAuthentication() {
return new TokenAuthentication("…");
}
}
```
#### Inject and use VaultTemplate
```java
public class Example {
// inject the actual template
@Autowired
private VaultOperations operations;
public void writeSecrets(String userId, String password) {
Map data = new HashMap();
data.put("password", password);
operations.write(userId, data);
}
public Person readSecrets(String userId) {
VaultResponseSupport response = operations.read(userId, Person.class);
return response.getBody();
}
}
```
#### Vault `PropertySource`
```java
@VaultPropertySource(value = "aws/creds/s3",
propertyNamePrefix = "aws."
renewal = Renewal.RENEW)
public class MyConfig {
}
public class Example {
// inject the actual values
@Value("${aws.access_key}")
private String awsAccessKey;
@Value("${aws.secret_key}")
private String awsSecretKey;
public InputStream getFileFromS3(String filenname) {
// …
}
}
```
{% endcapture %}
{% capture related_resources %}
### Getting Started
[Examples](https://github.com/mp911de/spring-cloud-vault-config-samples)
{% endcapture %}
{% include project_page.html %}