Skip to main content

AKEYLESS

AKEYLESS is a comprehensive secrets management and data protection platform that provides unified access to sensitive credentials, encryption keys, certificates, and other secrets across cloud and on-premises environments. As a cloud-native vaults and secrets manager, AKEYLESS enables organizations to centrally store, manage, rotate, and control access to secrets, API keys, passwords, tokens, certificates, and cryptographic keys without requiring any infrastructure deployment.

CategorySecrets management
DirectionQuery source
Sign-inAPI Key, JWT, AWS IAM, Azure AD, GCP
Query languagesSQLite
Websitehttp://akeyless.io

Before you start​

Huntbase can sign in to AKEYLESS with any of these methods: API Key, JWT, AWS IAM, Azure AD, GCP. Pick one, create the credential in AKEYLESS, then keep it to hand for the Connect step.

API Key​

Akeyless API Key auth method using an access ID and access key.

  1. In the Akeyless Console, go to Administration › Users & Auth Methods and select + New.
  2. Choose API Key as the type, select Next, enter a Name, and select Finish.
  3. Copy the Access ID and Access Key. The Access Key is displayed only once.
  4. Open the new authentication method, add an Access Role to it, and save your changes.

Permissions:

  • An Access Role with only the List and Read permissions on the paths you want to query.
Watch out for
  • The Access Key cannot be shown again. If you lose it, create a new key.

For the vendor's own instructions, see Akeyless API Key authentication documentation.

tip

Use a dedicated, read-only credential for Huntbase where the product allows it. Huntbase only needs to read.

Connect AKEYLESS​

  1. Go to Connections and click New connection, or click New connection on the AKEYLESS product page.
  2. On Product, pick AKEYLESS and choose the Owner.
  3. On Details, give the connection a Name and, optionally, a Description.
  4. On Connect, fill in the settings and credentials described below.
  5. On Verify, review the summary and click Create & check.

For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.

Settings​

Where your AKEYLESS lives:

FieldRequiredNotes
Access TypeNoSet this to api_key when you use the API Key method. One of api_key, aws_iam, azure_ad, gcp, universal_identity, k8s, jwt. Defaults to api_key.
Access IDYesThe Access ID of the authentication method you created.
API URLNoLeave blank to use https://api.akeyless.io. Set it only when you connect through your own Akeyless Gateway.
GCP AudienceNo
Azure Object IDNo
Kubernetes Auth Config NameNo

Credentials​

Choose a Method, enter a Credential label (for example Production), then fill in the fields for that method.

API Key​

FieldRequiredNotes
Access KeyYesSecret — not shown again after you save it.
Universal Identity TokenNoSecret — not shown again after you save it.
Kubernetes Service Account TokenNoSecret — not shown again after you save it.
Gateway CA CertificateNoSecret — not shown again after you save it.

JWT​

FieldRequiredNotes
JWTYesSecret — not shown again after you save it.
Gateway CA CertificateNoSecret — not shown again after you save it.

AWS IAM​

FieldRequiredNotes
Gateway CA CertificateNoSecret — not shown again after you save it.

Azure AD​

FieldRequiredNotes
Gateway CA CertificateNoSecret — not shown again after you save it.

GCP​

FieldRequiredNotes
Gateway CA CertificateNoSecret — not shown again after you save it.

Query it​

Once connected, AKEYLESS can serve these languages in a query tab, and Scout can use it when you ask in Auto:

LanguageUse it for
SQLiteSQL across this source and every other connected source.

Next steps​