vault ${ENGINE} ${CMD} ${PATH}/${NAME} ${KEY/VALUE}
ENGINE: kv
CMD: get,put,list - depends on the engine
PATH: secrets - depends on the engine
NAME: name of the object
KEY/VALUE: value pairs
vault status - it should exit with code 0
vault kv put secret/hello foo=world - create secret hello and set k/v as foo=world
vault kv get [-format=json] secret/hello - retrieving the secret hello in json
vault kv delete secret/hello - delete data part of the secret, metadata will remain
vault kv metadata get [-format=json] secret/hello - retrieving the metadata of the secret hello including previous versions
vault write kv/my-secret value="s3c(eT" - old way to create secret
kv - raw data
aws - generate AWS IAM access keys
database - generate on-demand,time-limited db credentials