HashiCorp Certified - Vault Associate Course - Audit Devices

The video tutorial discusses the role and configuration of audit devices in Vault clusters. It explains how audit devices log authenticated requests and responses, and the importance of sending this data to a SIM or log aggregation tool. The tutorial covers enabling audit devices via CLI, setting file paths, and ensuring proper permissions. It describes three types of audit devices: file, syslog, and socket, highlighting their features and limitations. The video emphasizes the need for multiple audit devices to ensure safety and availability, and provides best practices for managing logs.

What is the purpose of an audit device in Vault?

Why is it important to protect the log file generated by the audit device?

How can you enable an audit device using the CLI?

What are the three different types of audit devices mentioned?

What happens if Vault cannot write to a persistent log?