topic Re: Vault : Get Vault Details in API in Dynatrace API

Vault : Get Vault Details in API

J01am — Mon, 30 Dec 2024 08:13:58 GMT

Hello all

I need to use Vault credential (USERNAME_PASSWORD or CERTIFICATE) through API.
I successfully got vault details (api/v2/credentials/<id>) (doc), but I didn't find any documentation related to how "get vault details", like username/password or certificate ?

Thank you for your help !

Jonas

Re: Vault : Get Vault Details in API

JamesKitson — Thu, 26 Dec 2024 15:19:56 GMT

That is by design, once created entries in the credential vault they are only 'accessible' by the extensions, synthetic monitors, and apps that use them they are not available in clear text via UI or API. They can only be overwritten.

From this doc:

"You can see the ID and properties of a credential, but credential content can't be viewed; it can only be overwritten. The contents of credentials are visible only to the synthetic monitors, apps, or ad hoc functions referencing them."

Re: Vault : Get Vault Details in API

J01am — Thu, 26 Dec 2024 17:05:19 GMT

Hi James,

Thank you for your answer. I thought that "Read credential vault entries" credentialVault.read permission might allow Vault read. Do you know if this philosophy might be more permissive in the future, or that is something that won't change ?

Thank you a lot again 🙂

Re: Vault : Get Vault Details in API

JamesKitson — Thu, 26 Dec 2024 19:24:36 GMT

This is not an area I am involved in the roadmap for but I found this existing Idea: https://community.dynatrace.com/t5/Product-ideas/See-Credentials-in-Credential-Vault/idi-p/167242

The reason for it being not planned should still apply. Additionally, the integration with external vaults mentioned in that older post is now available for several:

https://docs.dynatrace.com/docs/observe/digital-experience/synthetic-monitoring/general-information/external-vault-integration