Develop a secure distributed system for secrets storage and access.

Question

Anonymous · Accepted Answer

Core Design: Leader-follower architecture with the leader handling all
operations for consistency. Each secret is versioned and encrypted using
envelope encryption - data keys encrypt secrets, master key (in HSM) encrypts
data keys. Storage uses replicated etcd cluster.
Security:
 * Authentication: Short-lived tokens (15m), MFA for sensitive operations
 * Authorization: Path-based RBAC policies
 * Encryption: AES-256-GCM with per-secret nonces, 30-day key rotation
 * Audit: Comprehensive logging of all access attempts

Failure Handling: Leader steps down if quorum lost, automatic failover via
consensus, encrypted backups with strict access controls. System fails closed on
encryption/auth errors.

Develop a secure distributed system for secrets storage and access.

Did you come across this question in an interview?

Answers

Try Our AI Interviewer