June 2025 Summaries

The demo shows how to configure tokenization and masking of sensitive data using HCP Vault's transform secrets engine, which can be used with IBM Granite, Ollama, and Open WebUI for RAG. The goal is to protect access to sensitive information like credit card numbers and billing street addresses while still allowing the LLM to analyze and provide other information without leaking payment details. By using masking or tokenization transformations, you can ensure that only authorized applications have access to reveal sensitive data. The demo also highlights the importance of implementing AI agents to decode the payload with Vault's transform secrets engine for applications that need access to full plaintext credit card numbers or billing street addresses.

HashiCorp Vault now supports FIPS 140-3, the latest NIST standard for cryptographic modules, enabling organizations to modernize their security posture while meeting evolving compliance mandates. FIPS 140-3 represents a modernization of standards and a step toward greater international alignment, aligning with ISO/IEC 19790. HashiCorp Vault has expanded support to include FIPS 140-3 level 1 in version 1.19.4, allowing organizations to adopt a compliant platform without re-architecting their security stack. The transition to FIPS 140-3 is a regulated transition managed by NIST and the Cryptographic Module Validation Program (CMVP), with key dates including March 2019 approval and September 2021 cessation of new FIPS 140-2 submissions. Organizations subject to federal or industry-specific regulations can use Vault with confidence, knowing that it meets the latest cryptographic standards mandated by NIST, providing improved security assurance, simplified compliance, international readiness, and long-term support.

HashiCorp's Infrastructure Lifecycle Management portfolio aims to automate the build, deploy, and manage infrastructure over time, ensuring secure and cost-effective approaches. The company is introducing several new features at HashiDays 2025 to simplify infrastructure lifecycle management and accelerate time-to-value. These include Terraform ephemeral resources, pre-written Sentinel policies, private VCS access, module lifecycle management with revocation, HCP Waypoint actions, and HashiCorp Nomad 1.10 with dynamic host volumes. These features aim to reduce the barrier of adoption for policy as code infrastructure workflows, improve security and compliance, and enhance governance while allowing developers to move faster.

HashiCorp is showcasing its Security Lifecycle Management (SLM) features at HashiDays 2025, which include HCP Vault Radar, Boundary transparent sessions, and Consul external service discovery. These features aim to reduce security risks and improve the developer access experience for organizations. HCP Vault Radar helps detect and remediate unmanaged secrets, while Boundary provides secure human-to-machine access for sensitive applications. Consul's external service discovery simplifies the management of external services across multiple environments. The company is also introducing new features such as automated root credential rotation with HashiCorp Vault, isolated PKI workloads with constrained CAs, and post-quantum-ready encryption. Additionally, HashiCorp is promoting its Security Lifecycle Management portfolio to help organizations eliminate threats while reducing costs.

HCP Waypoint actions are now generally available, enabling platform teams to expose Day 2+ operations and workflows to developers as push-button tasks. These actions provide a way for platform teams to define and govern reusable workflows, while developers can trigger them directly from HCP Waypoint. There are two types of actions: custom actions that integrate with HTTP APIs and agent actions that execute operations within private networks. Custom actions can be used to trigger CI/CD operations, promotions, rollbacks, and more, while agent actions can be used to trigger operations in on-premises environments. HCP Waypoint actions provide self-service Day 2+ operations, centralized governance, and built-in extensibility, making it easier for platform teams to enable self-service, Day 2+ golden workflows for developers.

The latest version of Terraform migrate, 1.1, introduces significant improvements to support VCS workspaces and enhanced GitOps capabilities. This release allows users to create and configure HCP Terraform and Terraform Enterprise workspaces linked to GitHub or GitLab repositories as part of their migration configuration, enabling automated runs via the version control system workflow. The tool now fully embraces GitOps by enabling automated, Git-based migration flows, making the migration experience more seamless. Additionally, there are updates in VCS workspace support, including detection of OAuth-connected VCS providers and handling of various connection scenarios. The release also includes stability and performance improvements, such as token validation optimization and reliable branch push, which enhance the overall user experience.