Vault

Photo Credit: Ewere Diagboya As you move faster and faster with your DevOps practice, there is a piece of the puzzle that seems to be a little snag. That snag can cost you a whole lot, in terms of system security, management and updates. Application Parameters/Configurations; these guys practically determine how our applications run. It spans across database connection, to login credentials for RabbitMQ and other secret credentials. As a security practice, you do not want these credentials to be visible in your codebase when committing your code to your VCS (Version Control System). One of the ways to secure these credentials is by using Environment Variables which can be injected in the particular environment you need those secrets and configurations, instead of the values as they are. There also needs to be a place where these data need to be stored for safe keeping and if possible encrypted where they are stored. We shall be looking at these 3 secret storage solution used by DevOps engineers. Each of these has their pros and cons and we shall be analyzing them with the following criteria: a. Costb. Securityc. API/SDK Integrationd. Features Cost **AWS Secrets Manager**This is a managed service by AWS and according to AWS Pricing, this service costs $0.40 per secret per month $0.05 per 10,000 API calls. For context purposes, if you store 100 secrets (password, API Keys, etc) you pay $40 a month and if you request the value of the secret with a 40,000 API calls in a month you pay $0.2. more here **Hashipcorp’s Vault**This is an open-source tool. Meaning you are in charge of setup and scaling the service. You will need to set it up on a Virtual Machine and the VM you use will determine the cost and other operational costs involved in updating, securing the server in which Vault will be installed and configured on. **AWS Parameter Store**Still a managed service on AWS but this time it is under a feature called Systems Manager. It basically costs nothing. Did you just see that? Yes I mean it costs NOTHING. see here Security **AWS Secrets Manager**Secrets manager is quite a new service which is fully managed by AWS to the security of credentials stored on it is tied to IAM access on your AWS account. You can also integrate Secrets Manager with . Which helps to encrypt the data that is stored. Secrets Manager also comes with a secret rotation feature which allows you to automatically rotate API keys, passwords and more. This can be configured and wired with a Lambda Function to help with the rotation. AWS KMS **Hashipcorp’s Vault**Everything that has to do with the security of the vault application is solely the user’s responsibility. Vault stores the passwords inside the machine it is installed in and encrypts the data. It supports various backend storages; Filesystem, AWS S3, Azure, Google Cloud Storage, MongoDB. secret rotation feature here ( ) more here https://www.vaultproject.io/docs/internals/rotation.html **AWS Parameter Store**Just like the Secrets Manager, the security is tied to your IAM account in AWS. All requests are made either via the API or CLI. The keys for both are generated from the console and used. There is no secret rotation feature of any sort, except you want to customize one. API/SDK Integration Here they all have APIs and SDKs to retrieve stored keys. So for this grading they all pass General Features **AWS Secrets Manager**- Secured storage of secrets on AWS- Allow encryption of keys stored via KMS- Key rotation can be configured within a specific period- Privilege Access Management (IAM) **Hashipcorp’s Vault**- Stores secret in the filesystem or a database- Encryption as a Service- Privilege Access Management **AWS Parameter Store**- Secured storage of secrets on AWS- Allow encryption of keys stored via KMS- Privilege Access Management (IAM) Based on these features. You can choose which you can use for storing and retrieving your secrets. But it is crucial that you have a vault to store password, API Keys and connection strings.

AWS Secrets Manager vs. Hashicorp Vault vs. AWS Parameter Store

The TechBeat: Why Pay for the Cloud? Build Your Own with Raspberry Pi and Open Media Vault (2/5/2025)

Why Pay for the Cloud? Build Your Own with Raspberry Pi and Open Media Vault

¿Kunatsa Cloud ukar qullqi churañax wakisi? Raspberry Pi ukat Open Media Vault ukampiw juma pachpa lurañama

Hvorfor betale for skyen? Byg din egen med Raspberry Pi og Open Media Vault

Γιατί να πληρώσω για το Cloud; Δημιουργήστε το δικό σας με το Raspberry Pi και το Open Media Vault

¿Por qué pagar por la nube? Cree la suya propia con Raspberry Pi y Open Media Vault

क्लाउड के लिए भुगतान क्यों करें? रास्पबेरी पाई और ओपन मीडिया वॉल्ट के साथ अपना खुद का क्लाउड बनाएँ

Miért fizet a felhőért? Készítse el sajátját a Raspberry Pi és az Open Media Vault segítségével

なぜクラウドにお金を払う必要があるのか？Raspberry Pi と Open Media Vault を使って自分だけのクラウドを構築しましょう

¿Imaraykutaq Puyumanta qullqita quy? Raspberry Piwan chaymanta Open Media Vaultwan Kikiykipaq ruway

Зачем платить за облако? Создайте свое собственное с Raspberry Pi и Open Media Vault

Чаро барои абр пардохт кунед? Бо Raspberry Pi ва Open Media Vault шахсии худро созед

کلاؤڈ کے لئے ادائیگی کیوں کریں؟ Raspberry Pi اور Open Media Vault کے ساتھ اپنا خود بنائیں

Kutheni Uhlawulela Ifu? Yakha eyakho ngeRaspberry Pi kunye neVault yeMedia evulekileyo

Traditionally speaking, the banking system works with the help of a vast network of reliable intermediaries. Despite its challenges and shortcomings, we continue to rely on it to protect our funds and valuables – primarily in the virtual safe deposit box. This trust has been built over the centuries by the traditional banking system. Meanwhile, in the non-traditional landscape of cryptocurrency, the idea of a self-custody wallet has continued to gain traction even though bad actors are constantly in the news for hacking exchanges. While the crypto industry has undergone significant development, it is still very much plagued by scams and hacks that undermine efforts to build trust among millions of potential users. Crypto has an image problem, despite the promises of a self-custody revolution, and this is only aggravated by the instances of “overnight millionaires”. As a technological innovation, self-custody, which moves the management of assets into the hands of customers, represents a paradigm shift. It eliminates third-party involvement—a feature that can be a lifesaver as many platforms such as Terra, Celsius, and FTX, to mention a few, have crumbled causing significant losses to the tune of $40 billion as per CoinDesk. Building Trust Over Time It has taken several years of legal framing and enhancing the security measures of the conventional banking systems for people to develop trust in those systems. For instance when Silicon Valley Bank went bust, requisite measures to deal with customer losses were instituted without any delay. Crypto business, conversely, is a rather ill-defined and continuously developing market that still has no set rules to follow. Trust in this space has often been lost due to several failures as well as fraud-related cases. Consequently, self-custody appears to be the most viable innovation in such an environment. We can own assets outright and decrease the risk associated with third parties, which makes the process free from their intervention. The Role of Technology in Enhancing Security In the future, as this industry develops, we should also see these self-custody technologies reach the same high levels of trust and reliability as the present-day banking sector. Currently, CCData reveals that over one hundred providers can be identified all over the world to provide custodial solutions to retail and institutional investors looking to invest in crypto assets. The consolidation of the industry is foreseeable, as it is borne out by the experiences of sectors such as banking and the internet when transitions are initiated to tighten up security and instill greater trust in the industry. Distrust of centralized infrastructure is another problem that might appear unfathomable for retail users, but self-custody is imperative. The self-custody market remains to be developing, providing better and more consumer-friendly solutions that handle assets on the user‘s behalf. Additionally, self-custody is not only about transitioning between one technological paradigm and another – but a paradigm shift in thought. That is an indication of a shift towards self-organization and one’s faith in the financial systems. Unfortunately, self-custody will become one of the standards as crypto develops further for those who want their funds to be secure. Challenges Facing Web3 Wallet Management Currently, managing a Web3 wallet comes with the following challenges: Seed Phrases A Web3 wallet most importantly comprises the seed phrase recognized as a recovery phrase. It serves the purpose of becoming a unique identifier, allowing users to restore their wallets on various gadgets. It is a 12-24 random word phrase, and losing such a phrase will result in permanent loss of wallet and any of the funds stored in it. Unfortunately, there is no organized service to recover the phrase, and the total burden lies on the user. The problem lies in the question of how to safely store this seed phrase securely at the same time. It is too long and random that users cannot memorize it easily, and when they write it down or store it in an informatics device, there are some dangers involved. If the physical copy is lost, damaged, or stolen — or if a digital copy of the information is cracked — the user’s wallet could leak or could be locked away forever. Generating and Remembering Strong Passwords The majority of Web3 wallets also force users to set essential passwords to enhance the application’s protection. Such passwords must be used so that one is long and different from those used in the other accounts and contains symbols that cannot be subjected to hacking or brute force. However, this creates a significant challenge: how to achieve the best password creation to meet the standard of secularity while, at the same time be okay with the user to remember it. The reality is that there is no one server that a person can turn to get help, and as such, if the password is gone, so is the wallet. Worse still, fundamental password reset strategies such as receiving password reset links via email are not feasible in Web 3. As a result, the wallet remains closed for all eternity if the user forgets or loses the password to the wallet. This password is only with the user, so password insecurity is still an issue when managing Web3 wallets. Protecting Against Phishing Scams and Malware Crypto phishing scams are one of the most common types of scams actively used in the Web3 ecosystem. The attackers continue hiding behind the replica of any type of service or person, using techniques ranging from private keys to passwords from the user. As pointed out it has been noted that this kind of scam has evolved in a way that when the individual clicks on the links to the sites involved, these look almost like the real site, putting even the intelligent users at the mercy of the con-men. Malware is another huge problem because it is easy to spread an infected file or program into an organization's network. This can be acquired through downloads or by clicking on links in ads and will surreptitiously steal wallet details. For example, some malware may keep track of the clipboard of the user to replace the copied wallet address with a fake one, so as to guarantee that users deposit their cash into the wrong wallet. That is why pointing interest from the user and awareness of threats in the information space is needed to prevent these forms of attacks. Remaining Cautious of Unknown Links and Downloads Among the most used attack methods in Web3 is using links or downloads, which sound familiar or unknown to the user. If the user clicks on a fraudulent link, then the wallet becomes vulnerable to phishing sites, or the user's device is infected with malware. These are attacks with the intent of capturing the private key or otherwise phishing users into signing up for fraudulent transactions. Given the fact that Web3 is a decentralized network system, there is effectively no protection, and users are their self-defense line. This challenge is especially challenging because links can be disguised in several different ways, shapes, and forms. It comes from emails pretending to be from customer support or alert services on social media sites. One can compromise their account easily simply by downloading a well-known wallet plugin from untrusted sources. It makes every exchange that occurs through the platforms a potential risk that needs to be avoided. How GRVT Is Challenging The Notion of Private Key The GRVT Wallet simplifies the user experience through Web Authentication (WebAuthn), which allows users to create and access their wallet using a password and passkeys, avoiding the complexities associated with traditional crypto wallets. The integration of Dfns technology allows users to access their wallets via fingerprint or facial recognition, offering quick and secure authentication similar to traditional online banking. And it blends the user-friendliness of Web2 with the security of self-custody, protecting assets without the technical burdens. By leveraging off-chain, peer-to-peer networks with multi-party computation (MPC) and public key infrastructure, it is able to guarantee: No Single Point of Failure: GRVT Wallet supports multiple devices, creating multiple security layers to prevent breaches. Responsive Recovery: Recovery wallets and backup codes provide fail-safes if credentials are lost. Uninterrupted Transactions: Linking new devices doesn’t affect public key, allowing continuous transfers. Conclusion The question of why the conventional banking system continues to thrive despite its shortcomings and the revolutionary advantage of the self-custody system boils down to trust. Millions around the world still feel safe to keep their money and other valuables in the banks and the incidence of crypto scams and losses has increasingly overshadowed the prospects of a generational transition from modern banking to cryptocurrency and self-custody wallet. This problem is further aggravated by the technical complexities surrounding the use of a smart contract wallet, which requires a level of skill to operate. Nonetheless, the possibility for both systems to exist side-by-side in the future is worth considering. Traditionally speaking, the banking system works with the help of a vast network of reliable intermediaries. Despite its challenges and shortcomings, we continue to rely on it to protect our funds and valuables – primarily in the virtual safe deposit box. This trust has been built over the centuries by the traditional banking system. Meanwhile, in the non-traditional landscape of cryptocurrency, the idea of a self-custody wallet has continued to gain traction even though bad actors are constantly in the news for hacking exchanges. While the crypto industry has undergone significant development, it is still very much plagued by scams and hacks that undermine efforts to build trust among millions of potential users. Crypto has an image problem, despite the promises of a self-custody revolution, and this is only aggravated by the instances of “overnight millionaires”. As a technological innovation, self-custody, which moves the management of assets into the hands of customers, represents a paradigm shift. It eliminates third-party involvement—a feature that can be a lifesaver as many platforms such as Terra, Celsius, and FTX, to mention a few, have crumbled causing significant losses to the tune of $40 billion as per CoinDesk . Crypto CoinDesk Building Trust Over Time It has taken several years of legal framing and enhancing the security measures of the conventional banking systems for people to develop trust in those systems. For instance when Silicon Valley Bank went bust, requisite measures to deal with customer losses were instituted without any delay. Silicon Valley Bank Crypto business, conversely, is a rather ill-defined and continuously developing market that still has no set rules to follow. Trust in this space has often been lost due to several failures as well as fraud-related cases. Consequently, self-custody appears to be the most viable innovation in such an environment. We can own assets outright and decrease the risk associated with third parties, which makes the process free from their intervention. The Role of Technology in Enhancing Security In the future, as this industry develops, we should also see these self-custody technologies reach the same high levels of trust and reliability as the present-day banking sector. Currently, CCData reveals that over one hundred providers can be identified all over the world to provide custodial solutions to retail and institutional investors looking to invest in crypto assets. The consolidation of the industry is foreseeable, as it is borne out by the experiences of sectors such as banking and the internet when transitions are initiated to tighten up security and instill greater trust in the industry. Distrust of centralized infrastructure is another problem that might appear unfathomable for retail users, but self-custody is imperative. The self-custody market remains to be developing, providing better and more consumer-friendly solutions that handle assets on the user‘s behalf. Additionally, self-custody is not only about transitioning between one technological paradigm and another – but a paradigm shift in thought. That is an indication of a shift towards self-organization and one’s faith in the financial systems. Unfortunately, self-custody will become one of the standards as crypto develops further for those who want their funds to be secure. Challenges Facing Web3 Wallet Management Currently, managing a Web3 wallet comes with the following challenges: Seed Phrases A Web3 wallet most importantly comprises the seed phrase recognized as a recovery phrase. It serves the purpose of becoming a unique identifier, allowing users to restore their wallets on various gadgets. It is a 12-24 random word phrase, and losing such a phrase will result in permanent loss of wallet and any of the funds stored in it. Unfortunately, there is no organized service to recover the phrase, and the total burden lies on the user. The problem lies in the question of how to safely store this seed phrase securely at the same time. It is too long and random that users cannot memorize it easily, and when they write it down or store it in an informatics device, there are some dangers involved. If the physical copy is lost, damaged, or stolen — or if a digital copy of the information is cracked — the user’s wallet could leak or could be locked away forever. Generating and Remembering Strong Passwords The majority of Web3 wallets also force users to set essential passwords to enhance the application’s protection. Such passwords must be used so that one is long and different from those used in the other accounts and contains symbols that cannot be subjected to hacking or brute force. However, this creates a significant challenge: how to achieve the best password creation to meet the standard of secularity while, at the same time be okay with the user to remember it. The reality is that there is no one server that a person can turn to get help, and as such, if the password is gone, so is the wallet. Worse still, fundamental password reset strategies such as receiving password reset links via email are not feasible in Web 3. As a result, the wallet remains closed for all eternity if the user forgets or loses the password to the wallet. This password is only with the user, so password insecurity is still an issue when managing Web3 wallets. Protecting Against Phishing Scams and Malware Crypto phishing scams are one of the most common types of scams actively used in the Web3 ecosystem. The attackers continue hiding behind the replica of any type of service or person, using techniques ranging from private keys to passwords from the user. As pointed out it has been noted that this kind of scam has evolved in a way that when the individual clicks on the links to the sites involved, these look almost like the real site, putting even the intelligent users at the mercy of the con-men. Malware is another huge problem because it is easy to spread an infected file or program into an organization's network. This can be acquired through downloads or by clicking on links in ads and will surreptitiously steal wallet details. For example, some malware may keep track of the clipboard of the user to replace the copied wallet address with a fake one, so as to guarantee that users deposit their cash into the wrong wallet. That is why pointing interest from the user and awareness of threats in the information space is needed to prevent these forms of attacks. Remaining Cautious of Unknown Links and Downloads Among the most used attack methods in Web3 is using links or downloads, which sound familiar or unknown to the user. If the user clicks on a fraudulent link, then the wallet becomes vulnerable to phishing sites, or the user's device is infected with malware. These are attacks with the intent of capturing the private key or otherwise phishing users into signing up for fraudulent transactions. Given the fact that Web3 is a decentralized network system, there is effectively no protection, and users are their self-defense line. This challenge is especially challenging because links can be disguised in several different ways, shapes, and forms. It comes from emails pretending to be from customer support or alert services on social media sites. One can compromise their account easily simply by downloading a well-known wallet plugin from untrusted sources. It makes every exchange that occurs through the platforms a potential risk that needs to be avoided. How GRVT Is Challenging The Notion of Private Key How GRVT Is Challenging The Notion of Private Key The GRVT Wallet simplifies the user experience through Web Authentication (WebAuthn), which allows users to create and access their wallet using a password and passkeys, avoiding the complexities associated with traditional crypto wallets. The integration of Dfns technology allows users to access their wallets via fingerprint or facial recognition, offering quick and secure authentication similar to traditional online banking. And it blends the user-friendliness of Web2 with the security of self-custody, protecting assets without the technical burdens. By leveraging off-chain, peer-to-peer networks with multi-party computation (MPC) and public key infrastructure, it is able to guarantee: No Single Point of Failure: GRVT Wallet supports multiple devices, creating multiple security layers to prevent breaches. Responsive Recovery: Recovery wallets and backup codes provide fail-safes if credentials are lost. Uninterrupted Transactions: Linking new devices doesn’t affect public key, allowing continuous transfers. Conclusion The question of why the conventional banking system continues to thrive despite its shortcomings and the revolutionary advantage of the self-custody system boils down to trust. Millions around the world still feel safe to keep their money and other valuables in the banks and the incidence of crypto scams and losses has increasingly overshadowed the prospects of a generational transition from modern banking to cryptocurrency and self-custody wallet. This problem is further aggravated by the technical complexities surrounding the use of a smart contract wallet, which requires a level of skill to operate. Nonetheless, the possibility for both systems to exist side-by-side in the future is worth considering.

The Vaults vs. Self-Custody: A Trust Revolution in Modern Finance

The Vaults vs Self-Custody: A Trust Revolution in Modern Finance

Сховішчы супраць самастойнай апекі: рэвалюцыя даверу ў сучасных фінансах

Трезорите срещу самопопечителство: Революция на доверието в съвременните финанси

Las bóvedas frente a la autocustodia: una revolución de la confianza en las finanzas modernas

Brankas vs. Penitipan Diri: Revolusi Kepercayaan dalam Keuangan Modern

金庫 vs. 自己管理：現代金融における信頼革命

Trezory vs. Vlastná úschova: Revolúcia dôvery v modernom financii

தி வால்ட்ஸ் எதிராக சுய-கஸ்டடி: நவீன நிதியத்தில் ஒரு நம்பிக்கைப் புரட்சி

Kasalar ve Öz-Muhafaza: Modern Finansta Bir Güven Devrimi

Các két sắt so với quyền tự lưu giữ: Một cuộc cách mạng về lòng tin trong tài chính hiện đại

Introduction .Net Aspire framework is used to develop cloud and production-ready distributed applications. It consists of components to handle cloud-native concerns such as Redis, Postgres etc. Prerequisites Install .Net 8
Install Visual Studio 2022 version 17 or higher
.Net Aspire Workload
Container runtime such as Docker Desktop
10 Day .Net Aspire Challenge Objectives Learn how to create a starter project using .Net Aspire with the Azure Key Vault. Github Sample: The solution structure is divided into the following projects DotnetAspireChallenge.ApiService
DotnetAspireChallenge.AppHost
DotnetAspireChallenge.ServiceDefaults
DotnetAspireChallenge.Web Getting Started Step 1: Install the following NuGet package Install the following Nuget package into the subsequent project “DotnetAspireChallenge.AppHost” dotnet add package Aspire.Hosting.Azure.KeyVault In the above project, register the Azure Key Vault var secrets = builder.ExecutionContext.IsPublishMode
        ? builder.AddAzureKeyVault("secrets")
        : builder.AddConnectionString("secrets"); Note: A keyVault connection string is required, which means an Azure KeyVault service should be UP and RUNNING on the Azure cloud. Step 2: Install another NuGet package Install the following Nuget package into the subsequent project “DotnetAspireChallenge.ApiService” dotnet add package Aspire.Azure.Security.KeyVault There are two ways to use Azure KeyVault Using Configuration
Using SecretClient For Configuration Register the context of the Program.cs file as follows builder.Configuration.AddAzureKeyVaultSecrets("secrets") then retrieve the secrets using the IConfiguration class as follows public class ExampleService(IConfiguration configuration)
    {
        string secretValue = configuration["secretKey"];
        // Use secretValue ...
    } For SecretClient Create an extension class and register a minimal API GET method to demonstrate the SecretClient usage in the API Service public static class AspireKeyVaultExtension
    {
    
        public static void MapKeyVaultEndpoint(this WebApplication app)
        {
            app.MapGet("/vault", async (SecretClient secretClient) =>
            {
    
                try
                {
                    // Define the secret name and value
                    string secretName = "mySecret";
                    string secretValue = "This is a secret value";
    
                    // Set the secret
                    KeyVaultSecret secret = new KeyVaultSecret(secretName, secretValue);
    
                    await secretClient.SetSecretAsync(secret);
                    return Results.Ok(await secretClient.GetSecretAsync(secretName));
    
                }
                catch (RequestFailedException e)
                {
                    Console.WriteLine("HTTP error code {0}: {1}", e.Status, e.ErrorCode);
                    Console.WriteLine(e.Message);
                    return Results.Problem($"HTTP error code {e.Status}: {e.Message}");
                }
            });
        }
    } and finally, register in the Program.cs file app.MapKeyVaultEndpoint(); Add additional connection string properties using the JSON syntax {
      "Aspire": {
        "Azure": {
          "Security": {
            "KeyVault": {
              "VaultUri": "YOUR_VAULT_URI",
              "DisableHealthChecks": false,
              "DisableTracing": true,
              "ClientOptions": {
                "DisableChallengeResourceVerification": true
              }
            }
          }
        }
      }
    } Congratulations..!! You’ve successfully integrated the Azure KeyVault component into the .Net Aspire project. Github Project GitHub - ssukhpinder/DotnetAspireChallenge: 10 Day .Net Aspire Challenge More Cheatsheets Cheat Sheets — .Net C# Programming🚀 Thank you for being a part of the C# community! Before you leave: Follow us: Youtube | X | LinkedIn | Dev.to
Visit our other platforms: GitHub
More content at C# Programming Introduction .Net Aspire framework is used to develop cloud and production-ready distributed applications. It consists of components to handle cloud-native concerns such as Redis, Postgres etc. Prerequisites Install .Net 8 Install Visual Studio 2022 version 17 or higher .Net Aspire Workload Container runtime such as Docker Desktop
10 Day .Net Aspire Challenge Install .Net 8 .Net 8 Install Visual Studio 2022 version 17 or higher Visual Studio 2022 .Net Aspire Workload Container runtime such as Docker Desktop 10 Day .Net Aspire Challenge Docker Desktop 10 Day .Net Aspire Challenge Objectives Learn how to create a starter project using .Net Aspire with the Azure Key Vault. Github Sample : The solution structure is divided into the following projects Github Sample DotnetAspireChallenge.ApiService DotnetAspireChallenge.AppHost DotnetAspireChallenge.ServiceDefaults DotnetAspireChallenge.Web DotnetAspireChallenge.ApiService DotnetAspireChallenge.AppHost DotnetAspireChallenge.ServiceDefaults DotnetAspireChallenge.Web DotnetAspireChallenge.Web Getting Started Step 1: Install the following NuGet package Install the following Nuget package into the subsequent project “ DotnetAspireChallenge.AppHost ” DotnetAspireChallenge.AppHost dotnet add package Aspire.Hosting.Azure.KeyVault dotnet add package Aspire.Hosting.Azure.KeyVault In the above project, register the Azure Key Vault var secrets = builder.ExecutionContext.IsPublishMode
        ? builder.AddAzureKeyVault("secrets")
        : builder.AddConnectionString("secrets"); var secrets = builder.ExecutionContext.IsPublishMode
        ? builder.AddAzureKeyVault("secrets")
        : builder.AddConnectionString("secrets"); Note: A keyVault connection string is required, which means an Azure KeyVault service should be UP and RUNNING on the Azure cloud. Note: Step 2: Install another NuGet package Install the following Nuget package into the subsequent project “ DotnetAspireChallenge.ApiService ” DotnetAspireChallenge.ApiService dotnet add package Aspire.Azure.Security.KeyVault dotnet add package Aspire.Azure.Security.KeyVault There are two ways to use Azure KeyVault Using Configuration Using SecretClient Using Configuration Using SecretClient For Configuration Register the context of the Program.cs file as follows builder.Configuration.AddAzureKeyVaultSecrets("secrets") builder.Configuration.AddAzureKeyVaultSecrets("secrets") then retrieve the secrets using the IConfiguration class as follows public class ExampleService(IConfiguration configuration)
    {
        string secretValue = configuration["secretKey"];
        // Use secretValue ...
    } public class ExampleService(IConfiguration configuration)
    {
        string secretValue = configuration["secretKey"];
        // Use secretValue ...
    } For SecretClient Create an extension class and register a minimal API GET method to demonstrate the SecretClient usage in the API Service public static class AspireKeyVaultExtension
    {
    
        public static void MapKeyVaultEndpoint(this WebApplication app)
        {
            app.MapGet("/vault", async (SecretClient secretClient) =>
            {
    
                try
                {
                    // Define the secret name and value
                    string secretName = "mySecret";
                    string secretValue = "This is a secret value";
    
                    // Set the secret
                    KeyVaultSecret secret = new KeyVaultSecret(secretName, secretValue);
    
                    await secretClient.SetSecretAsync(secret);
                    return Results.Ok(await secretClient.GetSecretAsync(secretName));
    
                }
                catch (RequestFailedException e)
                {
                    Console.WriteLine("HTTP error code {0}: {1}", e.Status, e.ErrorCode);
                    Console.WriteLine(e.Message);
                    return Results.Problem($"HTTP error code {e.Status}: {e.Message}");
                }
            });
        }
    } public static class AspireKeyVaultExtension
    {
    
        public static void MapKeyVaultEndpoint(this WebApplication app)
        {
            app.MapGet("/vault", async (SecretClient secretClient) =>
            {
    
                try
                {
                    // Define the secret name and value
                    string secretName = "mySecret";
                    string secretValue = "This is a secret value";
    
                    // Set the secret
                    KeyVaultSecret secret = new KeyVaultSecret(secretName, secretValue);
    
                    await secretClient.SetSecretAsync(secret);
                    return Results.Ok(await secretClient.GetSecretAsync(secretName));
    
                }
                catch (RequestFailedException e)
                {
                    Console.WriteLine("HTTP error code {0}: {1}", e.Status, e.ErrorCode);
                    Console.WriteLine(e.Message);
                    return Results.Problem($"HTTP error code {e.Status}: {e.Message}");
                }
            });
        }
    } and finally, register in the Program.cs file app.MapKeyVaultEndpoint(); app.MapKeyVaultEndpoint(); Add additional connection string properties using the JSON syntax {
      "Aspire": {
        "Azure": {
          "Security": {
            "KeyVault": {
              "VaultUri": "YOUR_VAULT_URI",
              "DisableHealthChecks": false,
              "DisableTracing": true,
              "ClientOptions": {
                "DisableChallengeResourceVerification": true
              }
            }
          }
        }
      }
    } {
      "Aspire": {
        "Azure": {
          "Security": {
            "KeyVault": {
              "VaultUri": "YOUR_VAULT_URI",
              "DisableHealthChecks": false,
              "DisableTracing": true,
              "ClientOptions": {
                "DisableChallengeResourceVerification": true
              }
            }
          }
        }
      }
    } Congratulations..!! You’ve successfully integrated the Azure KeyVault component into the .Net Aspire project. Github Project GitHub - ssukhpinder/DotnetAspireChallenge: 10 Day .Net Aspire Challenge GitHub - ssukhpinder/DotnetAspireChallenge: 10 Day .Net Aspire Challenge More Cheatsheets Cheat Sheets — .Net Cheat Sheets — .Net C# Programming🚀 Thank you for being a part of the C# community! Before you leave: Follow us: Youtube | X | LinkedIn | Dev.to Visit our other platforms: GitHub More content at C# Programming Youtube X LinkedIn Dev.to GitHub C# Programming

The 10-Day .Net Aspire Challenge - Day 9: Azure Key Vault

Kelp DAO, a liquid restaking platform, has announced the launch of its 'Kelp Gain Vaults' program. This initiative aims to enhance the earning potential for restakers and users by providing streamlined access to multiple Layer 2 (L2) airdrops through a single, diversified strategy. The Kelp Gain Vaults program introduces a novel approach to managing crypto assets and maximizing rewards. At its core, the program utilizes smart contracts to automate asset deployment across various opportunities. Users deposit their assets into a vault and receive a synthetic token in return, which represents their share of the pooled assets. Key features of the Kelp Gain Vaults include: • Simplified participation in multiple L2 airdrop opportunities • Automated management of asset allocations • Integration with mainnet DeFi yields • Periodic strategy adjustments by vault managers The initial offering in the Kelp Gain Vaults program is the Airdrop Gain Vault. This specialized vault focuses on simplifying participation in airdrop opportunities across various L2 protocols. Users can deposit assets like ETH or rsETH, which are then bridged to partner L2s to enhance airdrop potential. Benefits of the Airdrop Gain Vault: • Access to multiple L2 airdrops through a single deposit • Integration with mainnet DeFi yields for additional earning opportunities • Issuance of agETH, a synthetic token that can be used in other DeFi protocols • Potential for enhanced yields through deployment on platforms like Pendle The launch of the Kelp Gain Vaults program involves collaboration with several key partners: • August: Providing institutional-grade smart contract infrastructure • Tulipa Capital: Acting as the lead strategy partner for the Airdrop Gain Vault • L2 and DeFi partners: Including Linea, Karak, Scroll, Pendle, Across, LZ, Spectra, Lyra, and various decentralized exchanges (DEXs) These partnerships aim to ensure a robust and diverse ecosystem for the Kelp Gain Vaults, offering users access to a wide range of opportunities across the DeFi landscape. The introduction of the Kelp Gain Vaults program represents a significant step towards automated reward management and investment strategies in the DeFi space. By simplifying access to complex strategies and leveraging the composability of DeFi, this initiative has the potential to: • Increase accessibility to advanced DeFi strategies for a broader user base • Optimize reward potential across multiple protocols and layers • Encourage further innovation in automated asset management within the DeFi sector Final Thoughts The launch of Kelp DAO's Gain Vaults program, particularly the Airdrop Gain Vault, marks an important development in the evolution of DeFi strategies. By offering simplified access to diverse L2 airdrops and integrating with mainnet DeFi yields, this initiative aims to enhance user experience and maximize reward potential. As the DeFi landscape continues to evolve, such innovations may play a crucial role in shaping the future of decentralized finance and asset management. Vested Interest Disclosure: This author is an independent contributor publishing via our business blogging program. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR. Kelp DAO , a liquid restaking platform, has announced the launch of its ' Kelp Gain Vaults ' program. This initiative aims to enhance the earning potential for restakers and users by providing streamlined access to multiple Layer 2 (L2) airdrops through a single, diversified strategy. The Kelp Gain Vaults program introduces a novel approach to managing crypto assets and maximizing rewards. At its core, the program utilizes smart contracts to automate asset deployment across various opportunities. Users deposit their assets into a vault and receive a synthetic token in return, which represents their share of the pooled assets. Kelp DAO Kelp Gain Vaults Key features of the Kelp Gain Vaults include: • Simplified participation in multiple L2 airdrop opportunities • Automated management of asset allocations • Integration with mainnet DeFi yields • Periodic strategy adjustments by vault managers The initial offering in the Kelp Gain Vaults program is the Airdrop Gain Vault. This specialized vault focuses on simplifying participation in airdrop opportunities across various L2 protocols. Users can deposit assets like ETH or rsETH, which are then bridged to partner L2s to enhance airdrop potential. Benefits of the Airdrop Gain Vault: Benefits of the Airdrop Gain Vault: • Access to multiple L2 airdrops through a single deposit • Integration with mainnet DeFi yields for additional earning opportunities • Issuance of agETH, a synthetic token that can be used in other DeFi protocols • Potential for enhanced yields through deployment on platforms like Pendle The launch of the Kelp Gain Vaults program involves collaboration with several key partners: • August: Providing institutional-grade smart contract infrastructure • Tulipa Capital: Acting as the lead strategy partner for the Airdrop Gain Vault • L2 and DeFi partners: Including Linea, Karak, Scroll, Pendle, Across, LZ, Spectra, Lyra, and various decentralized exchanges (DEXs) These partnerships aim to ensure a robust and diverse ecosystem for the Kelp Gain Vaults, offering users access to a wide range of opportunities across the DeFi landscape. The introduction of the Kelp Gain Vaults program represents a significant step towards automated reward management and investment strategies in the DeFi space. By simplifying access to complex strategies and leveraging the composability of DeFi, this initiative has the potential to: • Increase accessibility to advanced DeFi strategies for a broader user base • Optimize reward potential across multiple protocols and layers • Encourage further innovation in automated asset management within the DeFi sector Final Thoughts The launch of Kelp DAO's Gain Vaults program, particularly the Airdrop Gain Vault, marks an important development in the evolution of DeFi strategies. By offering simplified access to diverse L2 airdrops and integrating with mainnet DeFi yields, this initiative aims to enhance user experience and maximize reward potential. As the DeFi landscape continues to evolve, such innovations may play a crucial role in shaping the future of decentralized finance and asset management. Vested Interest Disclosure: This author is an independent contributor publishing via our business blogging program. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR. Vested Interest Disclosure: This author is an independent contributor publishing via our business blogging program . HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR. Vested Interest Disclosure: business blogging program business blogging program

Kelp DAO Introduces 'Gain Vault' Program with Integrated L2 Access

Kelp DAO ইন্টিগ্রেটেড L2 অ্যাক্সেস সহ 'গেইন ভল্ট' প্রোগ্রাম চালু করেছে

Kelp DAO führt „Gain Vault“-Programm mit integriertem L2-Zugriff ein

Kelp DAO presenta el programa 'Gain Vault' con acceso L2 integrado

Kelp DAO présente le programme « Gain Vault » avec accès L2 intégré

केल्प डीएओ ने एकीकृत एल2 एक्सेस के साथ 'गेन वॉल्ट' कार्यक्रम पेश किया

Kelp DAO、統合L2アクセスを備えた「Gain Vault」プログラムを導入

Kelp DAO, 통합 L2 액세스 기능을 갖춘 'Gain Vault' 프로그램 출시

Kelp DAO apresenta o programa 'Gain Vault' com acesso L2 integrado

Kelp DAO представляет программу «Gain Vault» с интегрированным доступом L2

Kelp DAO, Entegre L2 Erişimi ile 'Gain Vault' Programını Tanıttı

Kelp DAO giới thiệu chương trình 'Gain Vault' với quyền truy cập L2 tích hợp

Kelp DAO 推出集成 L2 访问权限的“Gain Vault”计划

A Game-Changer for On-chain Borrowers The launch of Credit Vaults aims to address the growing demand for stable and accessible credit among new on-chain entities, like fintech and payment companies. These borrowers are given the ability to design their own terms, which includes the ability to choose their own interest rates and payback schedules, which is one of the distinguishing characteristics of Credit Vaults. In addition, this model guarantees greater annual percentage yields (APYs) for lenders due to its full utilisation, which makes it a profitable choice for all parties involved in the relationship. Morgan Krupetsky of Ava Labs shared, “Avalanche is the ideal platform to support the launch of Clearpool’s Credit Vaults. The collaboration with Clearpool showcases a mutual commitment to developing innovative digital financial products and a shared focus on bringing tokenized assets and greater utility into the Avalanche ecosystem.” Transforming Fintech Lending: Introducing Short-term, Liquid Options Banxa teamed up with Clearpool to create the first Credit Vault. This will let Banxa borrow up to 5 million USDT. This agreement is very important because it lets lenders use a unique seven-day payback choice and get extra AVAX token benefits. The easy availability and flow of money is one of the main issues in the field of autonomous finance. This tool solves the issue and sets a new standard for adaptability and effectiveness. Leading the Charge Banxa, a key player in the crypto infrastructure space, has embraced the flexibility and opportunities provided by Clearpool's Credit Vaults. "Clearpool's Credit Vaults offer us the flexibility to meet our liquidity requirements," said Holger Arians, CEO of Banxa, highlighting the importance of customizable terms and the potential to attract a broader lender base. Cauris, specializing in private credit for fintech companies, plays a crucial role in managing the Credit Vault, emphasizing security and integrity in the system's design. Credit Vaults, which were added by Clearpool to Avalanche, are a major step forward in on-chain banking. Clearpool is not only meeting the needs of the market right now by making credit options more open, easy to get to, and effective, but they are also actively shaping the future of DeFi loans. This new way of doing things is likely to bring even more institutional and fintech players to the platform, making Clearpool even more of a star in the decentralised finance credit market. The announcement that Clearpool has recently made on its most recent initiative, which is the expansion into the Avalanche platform, as well as the release of a cutting-edge product known as Credit Vaults, is a big step forward for the company. Through this strategic choice, Clearpool is able to expand its horizons inside the DeFi market, marking the beginning of a new chapter for the company. Clearpool at the Forefront The launch of the Credit Vaults is a significant milestone, establishing Clearpool as a leader in the rapidly evolving DeFi space. The platform's ability to attract over 20 institutions for borrowing, including giants like Jane Street, underscores the growing interest and confidence in Clearpool’s offerings. Jakob Kronbichler, CEO & Co-founder of Clearpool, stated, “Launching Credit Vaults on Avalanche marks a major milestone for Clearpool and the RWA sector as we pioneer migrating credit on-chain.” Don’t forget to like and share the story! Image credits: Shubham's Web3 Vested Interest Disclosure: This author is an independent contributor publishing via our brand-as-author program. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR

Clearpool Revolutionizes DeFi Lending with Credit Vaults on Avalanche

ক্লিয়ারপুল তুষারপাতের উপর ক্রেডিট ভল্টের সাথে ডিফাই ঋণের বিপ্লব ঘটায়

Clearpool revolutioniert die DeFi-Kreditvergabe mit Credit Vaults auf Avalanche

Clearpool revoluciona los préstamos DeFi con bóvedas de crédito en Avalanche

Clearpool révolutionne les prêts DeFi avec des coffres-forts de crédit sur Avalanche

क्लियरपूल ने एवलांच पर क्रेडिट वॉल्ट के साथ DeFi लेंडिंग में क्रांति ला दी

Clearpool が Avalanche の Credit Vault で DeFi 融資に革命を起こす

Clearpool은 Avalanche의 신용 금고를 통해 DeFi 대출에 혁명을 일으켰습니다.

Clearpool revoluciona empréstimos DeFi com cofres de crédito no Avalanche

Clearpool совершает революцию в кредитовании DeFi с помощью кредитных хранилищ на Avalanche

Clearpool, Avalanche'ta Kredi Kasaları ile DeFi Kredilendirmesinde Devrim Yaratıyor

Clearpool cách mạng hóa hoạt động cho vay DeFi bằng kho tín dụng trên Avalanche

Clearpool 利用 Avalanche 上的信用库彻底改变了 DeFi 借贷

A big event is now taking place in the heart of Singapore, a nation that is well-known for its innovative and financial practices, and it is likely to have a huge influence on the field of decentralised finance (DeFi). For Thetanuts Finance, this endeavour, which focuses on reinvesting and producing Liquid Restaking Tokens (LRTs), represents a big step forward in comparison to previous endeavours. This also represents the beginning of a new century for users of Pendle's PT-eETH, which will give them with opportunities that have never been made available to them before to maximise their profits in areas that have not been explored before. Now, let's have a look at this incredible innovation and how it will fundamentally revolutionise the way that investors in decentralised finance make choices. A Leap into the Future of Staking Imagine if the Ethereum (ETH) that you have staked is actively protecting other networks and providing you with rewards that go above and beyond the Ethereum Mainnet. The minds behind restaking, EigenLayer, made it happen, so it's not just a dream. Through the usage of $stETH in liquid restaking protocols, restaking enables users to create "Liquid Restaking Tokens" (LRTs), a novel kind of asset that is expected to transform return generation. Leading this change is EtherFi, whose Total Value Locked (TVL) is more over $2.5 billion. Users may now mint LRTs—specifically, $eETH—thanks to EtherFi. By doing so, they can have access to additional perks like EigenLayer points and protocol loyalty points. However, since they increase the potential rewards to a whole new level, third-party LRTs like Pendle Finance's PT-eETH are what truly pique people's attention. The Innovation of PT-eETH With a fixed annual percentage rate (APY) of around 20% and the guarantee of payback for $eETH at a 1:1 ratio at the conclusion of the period, Pendle Finance's PT-eETH stands out as a real novelty. Pendle Finance distinguishes itself in the competitive DeFi industry by providing investors with a unique opportunity to get consistent rates and transparent profits. Thetanuts Finance: Pioneering New Frontiers As far as on-chain options protocols go, Thetanuts Finance is in the forefront. It is currently entering the LRT industry with its Leveraged LRT Strategy Vault. This vault is not simply another DeFi product; rather, it is a strategically important tool intended to maximise the potential of $PT-eETH and provide customers with previously unheard-of returns growth. Imagine 'zapping' your $PT-eETH into a yield generation maelstrom, where it remains in one place and works to generate more profits. The Leveraged LRT Strategy Vaults from Thetanuts Finance make this feasible. Users may use $PT-eETH to borrow $ETH. Once borrowed, $ETH is placed in the ETH Call ("ETH-C") Basic Vault, where users may profit from option bonuses and features, but there is a catch: they must accept short volatility risk.    The yield creation symphony that Thetanuts Finance creates is composed of EigenLayer Points, EtherFi Loyalty Points, Pendle $PT-eETH Fixed Yield, Thetanuts Finance $ETH-C Basic Vault Option Premiums, and the soon-to-be-released $NUTS Rewards. This creative approach to yielding profits demonstrates Thetanuts Finance's commitment to provide its consumers value and advantages. The Ripple Effect: Shaping the DeFi Ecosystem Not only is Thetanuts Finance's Leveraged LRT Strategy Vault a brand-new product, but it is also a disruptive force that is anticipated to generate a substantial amount of demand within the DeFi community. Due to the fact that there are already 150,000 $PT-eETH in circulation, the market may undergo substantial changes, which highlights the significance of the novel initiative that Thetanuts Finance is working on. In light of the fact that Thetanuts Finance is getting ready to launch extra procedures for making use of Liquid Restaking Tokens (LRTs), additional choices are becoming accessible. Only the beginning has begun with this strategic vault. It is a stepping stone to a future in which LRTs will play a significant role in the investment plans of decentralised finance and intelligent investors will be able to get a greater variety of returns. The Essence of Innovation When it comes to the decentralised financial business, Thetanuts financial is a perfect example of what it means to innovate on a basic basis. It is clear that the company is continually looking for new ways to make money, not just for its clients but for the whole DeFi community as a whole, as seen by the fact that it has joined the market for Leveraged LRT Strategy Vaults. The company known as Thetanuts Finance is among the most successful businesses operating in an industry that thrives on change. They are in the vanguard of paving the way for a future in which decentralised finance expands beyond the traditional boundaries of the sector and embraces fresh investment and wealth generation tactics. This future is being paved by them. At the same time as we are entering a new era of decentralised finance (DeFi), we are able to feel the excitement that is rising up on our shoulders. The debut of Thetanuts Finance's Leveraged LRT Strategy Vaults is not only a significant achievement, but it is also a symbol of hope and a testament to the boundless possibilities that decentralised finance (DeFi) has to offer. This launch is a significant milestone. It is possible that pioneers like Thetanuts Finance, who are not afraid to go into unexplored territory, are responsible for the hopeful view that can be found about the future. Don’t forget to like and share the story! This author is an independent contributor publishing via our brand-as-author program. Be it through direct compensation, media partnerships, or networking, the author has a vested interest in the company/ies mentioned in this story. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR Vested Interest Disclosure:

Revolutionizing DeFi: Thetanuts Finance and the Dawn of Leveraged LRT Strategy Vaults

Revolutionierung von DeFi: Thetanuts Finance und der Beginn der Leveraged LRT Strategy Vaults

Revolucionando DeFi: Thetanuts Finance y el amanecer de las bóvedas de estrategias LRT apalancadas

Révolutionner DeFi : Thetanuts Finance et l'aube des coffres-forts stratégiques LRT à effet de levier

DeFi में क्रांति लाना: Thetanuts फाइनेंस और द डॉन ऑफ लीवरेज्ड LRT स्ट्रैटेजी वॉल्ट्स

DeFi の革命: Thetanuts Finance とレバレッジ LRT 戦略ボールトの夜明け

DeFi 혁명: Thetanuts Finance와 레버리지 LRT 전략 금고의 탄생

Revolucionando o DeFi: Thetanuts Finance e o surgimento dos cofres de estratégia LRT alavancados

Революция в DeFi: Thetanuts Finance и появление стратегических хранилищ LRT с кредитным плечом

DeFi'de Devrim Yaratıyor: Thetanuts Finans ve Kaldıraçlı LRT Strateji Kasalarının Şafağı

Cách mạng hóa DeFi: Thetanuts Finance và Bình minh của Kho chiến lược LRT có đòn bẩy

彻底改变 DeFi：Thetanuts Finance 和杠杆式 LRT 策略金库的黎明

VAULT

thexpressvault.com

-- employees

Since n.d.

COMPANY RANKING

VAULT

EVERGREEN INDEX #11680

Representing this company? Click here to claim and customize this page!

Vault WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!

VAULT

thexpressvault.com

-- employees

Since n.d.

COMPANY RANKING

VAULT

EVERGREEN INDEX #11680

RELATED COMPANIESRANK

STORIES ABOUT VAULT

Representing this company? Click here to claim and customize this page!

Vault WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!