docs: db plugin add link to lease docs (#18605)

This commit is contained in:
John-Michael Faircloth 2023-01-05 10:14:54 -06:00 committed by GitHub
parent 7d87548f4f
commit 58e2eb669b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions

View File

@ -15,8 +15,9 @@ configured roles. It works with a number of different databases through a plugin
interface. There are a number of built-in database types, and an exposed framework interface. There are a number of built-in database types, and an exposed framework
for running custom database types for extendability. This means that services for running custom database types for extendability. This means that services
that need to access a database no longer need to hardcode credentials: they can that need to access a database no longer need to hardcode credentials: they can
request them from Vault, and use Vault's leasing mechanism to more easily roll request them from Vault, and use Vault's [leasing mechanism](/docs/concepts/lease)
keys. These are referred to as "dynamic roles" or "dynamic secrets". to more easily roll keys. These are referred to as "dynamic roles" or "dynamic
secrets".
Since every service is accessing the database with unique credentials, it makes Since every service is accessing the database with unique credentials, it makes
auditing much easier when questionable data access is discovered. You can track auditing much easier when questionable data access is discovered. You can track