[zie]

or use an OSS solution: https://www.vaultproject.io/docs/secrets/databases/index.htm... and it conveniently does a lot more than just DB auth.

[jldugger]

Or LDAP?

https://dev.mysql.com/doc/refman/5.5/en/pam-pluggable-authen...

[zie]

True, a valid option for MySQL. Not every database handles LDAP, and Vault gives you dynamically created credentials to your DB, so the accounts are created and deleted AS NEEDED.