{"id":19800,"date":"2020-12-20T12:52:55","date_gmt":"2020-12-20T08:52:55","guid":{"rendered":"https:\/\/techxmedia.com\/?p=19800"},"modified":"2025-04-18T00:21:19","modified_gmt":"2025-04-17T20:21:19","slug":"beyondtrust-introduces-devops-secrets-safe-20-4","status":"publish","type":"post","link":"https:\/\/techxmedia.com\/en\/beyondtrust-introduces-devops-secrets-safe-20-4\/","title":{"rendered":"BeyondTrust introduces DevOps Secrets Safe 20.4"},"content":{"rendered":"\n

BeyondTrust<\/a>\u00a0has introduced DevOps Secrets Safe 20.4, with new functionality that\u00a0dynamically generate accounts to secure access to cloud infrastructures<\/a>.<\/p>\n\n\n\n

Cloud service providers<\/a> offer APIs that enable DevOps engineers to automate the management of their infrastructure. However, the accounts used to access these APIs are highly privileged, making them a primary target for attackers. Automated workflows typically only need a short window of access to accomplish a specific task, and the persistence of privileged accounts outside of this window represents an unnecessary risk of credential misuse or theft.<\/p>\n\n\n\n

DevOps Secrets Safe dynamically generates API accounts with a just-in-time model for privileged access. These accounts are created and removed by the solution as needed, eliminating the need for persistent accounts, and significantly shrinking the window of credential exposure. By automatically brokering access to cloud environments<\/a> through DevOps Secrets Safe, organizations can eliminate persistent accounts and significantly reduce the security footprint of their automated workflows, all while simplifying access controls for their cloud infrastructure<\/a>.<\/p>\n\n\n\n

In this release, BeyondTrust has also introduced a built-in time-based one-time password (TOTP), with a native two-factor authentication workflow for all DevOps Secrets Safe users. This functionality is essential to ensure every account is protected. A Kubernetes <\/a>Sidecar is also included in 20.4, which enables DevOps Secrets Safe to retrieve secrets on behalf of application containers on a defined interval, keeping them up to date with the latest available secret.<\/p>\n\n\n\n

\u201cOrganizations are increasingly leveraging dynamic cloud-based infrastructure and require strong security around secrets and privileged accounts for managing ever-changing cloud <\/a>assets,\u201d states Dan DeRosa, Chief Product Officer at BeyondTrust. \u201cDevOps Secrets Safe provides the risk protection they need for their highly privileged accounts.\u00a0\u00a0BeyondTrust continues to enable our customers\u2019 migration to the cloud<\/a> and the adoption of new technology stacks, like the DevOps ecosystem of third-party and open-source tools.\u201d\u00a0<\/p>\n\n\n\n

Industry analysts recommend securing these privileged accounts with a centralized secrets management solution that is purpose-built for security, but doesn\u2019t introduce friction into automated processes, keeping DevOps as agile as possible. This approach helps to reduce the risk of exposure, without slowing down the application delivery process.<\/p>\n\n\n\n

DevOps Secrets Safe is a highly scalable and highly available solution that provides centralized storage, retrieval, and audit of secrets and credentials. It eliminates the need to embed or hardcode passwords or other secrets, within code or scripts. The DevOps Secrets Safe unique architecture is built on Docker containers targeting Kubernetes for deployment and facilitates rapid deployment and fast time-to-value.<\/p>\n\n\n\n

DevOps Secrets Safe offers the following:<\/p>\n\n\n\n