Using Vault Dynamic Database Secrets to Retire Static Credentials
Static database passwords accumulate risk. Vault's database secrets engine can issue short-lived credentials on demand, but it introduces new operational dependencies and requires careful role design.