Vault provides Encryption as a Service (EaaS) to enable security teams to fortify data during transit and at rest. So even if an intrusion occurs, your data is encrypted and the attacker would never get a hold of the raw data.
Vault's transit secrets engine handles cryptographic functions on data in-transit. It can also be understood as encryption as a service.
16min
Transit Secrets Re-wrapping
Demonstrate one possible way to re-wrap data after rotating an encryption key in the transit engine in Vault.
12min
Java Application Demo
Understand Vault's AppRole authentication pattern and how to use it to
securely introduce a Vault authentication token to a target server,
application, container, etc. in a Java environment.