VaultOne: Register and Use a Secure Connection String (DevSecOps)

When applications communicate with databases, they typically require database credentials, often embedded directly in the source code as a connection string. This practice is insecure, as anyone with access to the codebase can also access sensitive credentials. VaultOne enables you to securely store and manage connection strings, preventing unauthorized access and supporting your organization’s DevSecOps initiatives.

Follow the steps below to register and use a secure connection string in VaultOne:

Adding a New Database

1. In the side menu, click Databases, then select + Add Database in the upper right corner.
2. Fill in all required fields for your database.
3. Click Test Connection.
   • If the configuration is correct, you’ll see a message confirming: “Connection string is working.”
4. Return to the Database menu.
5. For the database you just created, click Actions > View and copy the Resource ID.
6. Go to the Credentials section in the side menu.
7. Search for the credential associated with your connection string.
8. Click Actions > View and copy the Credential ID.

Adding Credentials to the VaultOne API

1. Open a new browser tab and navigate to your VaultOne API documentation.
   Example: https://YOURVAULT.app.vault.jumpcloud.com
2. Search for the GetCredentialSecret method and select it.
3. Click TRY IT OUT on the right side of the screen.
4. Paste the Credential ID and Resource ID into the appropriate fields, then click Execute.
5. You can leave the CredentialVersion field blank.
6. In the Response Body section, your secure connection string will be generated.