Challenge - Start Vault and Store Your First Secret
Start a Vault dev server, enable the KV v2 secrets engine at a custom path, write a secret with multiple keys, and retrieve it via the API.
Lab overview
HashiCorp Vault provides a centralized secrets management platform where applications and operators store, access, and audit sensitive data through a unified API. The dev server mode gives you a fully functional Vault instance with in-memory storage that requires no configuration - making it the fastest way to learn Vault fundamentals. The KV (Key-Value) version 2 secrets engine supports versioned secrets at custom mount paths, and every operation can be performed through both the CLI and the HTTP API, giving operators flexibility in how they interact with Vault.
In this challenge, you will start a Vault dev server, enable the KV v2 secrets engine at a custom path, write a multi-key secret, and retrieve the secret data using the Vault HTTP API.
Objectives
Upon completing this beginner level lab, you will be able to:
- Start a Vault dev server and set the required environment variables
- Enable the KV version 2 secrets engine at a custom mount path
- Write a secret with multiple key-value pairs to the KV v2 engine
- Retrieve secret data using the Vault HTTP API and confirm the stored values
Who is this lab for?
This lab is designed for:
- Operations engineers who need to validate their Vault fundamentals through a hands-on challenge without step-by-step guidance
- Security practitioners testing their ability to configure secrets engines and interact with the Vault API
- Vault Associate (003) candidates reinforcing exam domains covering dev server operations, KV secrets engines, and API interactions
Verified against your live environment
An automated validation engine inspects your actual resources and configurations as you work. Completion means the task was performed, not multiple choice, real-world proficiency.
More labs like this
Challenge - Build and Use a Custom Terraform Module
Build a reusable Terraform module for EC2 app tiers and deploy web and API instances using the module in AWS.
Challenge - Write and Apply Your First Terraform Configuration
Write a Terraform config to deploy a DynamoDB table with point-in-time recovery and tags, then verify the deployment.
Challenge - Import and Refactor Existing Infrastructure with Terraform
Bring pre-existing Azure resources under Terraform management without recreating them, reconcile your configuration to a zero-change plan, then refactor the storage account into a reusable module.
Related reading
Environment
Every lab includes
- Real environment, pre-credentialed
- Automated checks on every step
- Isolated sandbox, auto cleanup
- AI-recommended next steps
Lab curriculum
- 01
Challenge Scenario - Start Vault, Enable KV, Store, and Retrieve Secrets
4 automated checks
Skills validated
Not the lab you were looking for?
Browse 200+ hands-on labs across AWS, Azure, Kubernetes, Docker, and cloud security.