{"id":11116,"date":"2026-10-28T19:09:24","date_gmt":"2026-10-28T23:09:24","guid":{"rendered":"https:\/\/hostingdiscussion.com\/news\/?p=11116"},"modified":"2026-10-28T19:09:24","modified_gmt":"2026-10-28T23:09:24","slug":"ibm-extends-vault-to-ai-agents-but-revocation-questions-linger","status":"publish","type":"post","link":"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/","title":{"rendered":"IBM extends Vault to AI agents, but revocation questions linger"},"content":{"rendered":"<p><a href=\"https:\/\/www.ibm.com\/us-en\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">IBM<\/a> has additionally enhanced <a href=\"https:\/\/www.hashicorp.com\/en\/products\/vault\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">HashiCorp Vault<\/a>, enabling the tool to be used inside AI agents and giving administrators the ability to define what privileges those agents hold. With Vault 2.2, we can now take advantage of the Agent Identity integration, which identifies the agent and its lifecycle state, along with the rights and privileges it possesses. Both of these are already available.<\/p>\n<p>To illustrate this, let&#8217;s consider an example of an agent designed to debug a particular application. To complete this task, the agent must access the logs, communicate with the database, and change configuration parameters. An administrative login would help get this done; however, it would place too much power in the hands of unreliable software.<\/p>\n<p>This is still not sufficient. Although issuance of temporary credentials helps to reduce the window of time when credentials can be misused, this will do nothing if an agent misuses its permissions. Moreover, the identification of an agent tells us nothing about what the agent will do in the next moment.<\/p>\n<p dir=\"ltr\">Revocation raises its own questions. Cutting access stops new requests, but buyers will want to know what happens to open connections, queued jobs and changes already submitted.<\/p>\n<p dir=\"ltr\">Additionally, <a href=\"https:\/\/hostingdiscussion.com\/news\/ibm-google-cloud-join-forces-to-push-enterprise-ai-from-pilot-projects-into-real-production\/\">IBM<\/a> associates agents to Terraform processes for approved configurations. On the other hand, watsonx Orchestrate includes discovery of agents in Amazon Bedrock, Microsoft Foundry, and <a href=\"https:\/\/hostingdiscussion.com\/news\/googles-gemini-ai-gets-smarter-with-conversation-recall\/\">Google Gemini<\/a>, along with containment and evaluation services. Only evaluation is available today. The other two remain technology previews.<\/p>\n<p dir=\"ltr\">Service providers face a different problem. An agent serving several customers needs limits tied to each contract, so the provider has to keep tenants separate, block permissions from carrying over and keep audit trails. Upkeep costs money too. Someone must manage credential policies and respond when access fails, and that time eats into the labor savings.<\/p>\n<p dir=\"ltr\">A practical test is simple. Give an agent a maintenance task, then add an unauthorized request, let a credential expire and leave one operation half finished. Administrators can then see what the system blocked, what kept running and whether the logs make sense. How much of this works without custom integration is still unclear.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>IBM has additionally enhanced HashiCorp Vault, enabling the tool to be used inside AI agents and giving administrators the ability to define what privileges those agents hold. With Vault 2.2, we can now take advantage of the Agent Identity integration, which identifies the agent and its lifecycle state, along with the rights and privileges it [&hellip;]<\/p>\n","protected":false},"author":20624,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[8576,7084,8575,402,8578,8577],"class_list":["post-11116","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-agent-identity","tag-ai-agent-security","tag-hashicorp-vault","tag-ibm","tag-terraform","tag-vault-2-2"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>IBM extends Vault to AI agents, but revocation questions linger - Web Hosting News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IBM extends Vault to AI agents, but revocation questions linger - Web Hosting News\" \/>\n<meta property=\"og:description\" content=\"IBM has additionally enhanced HashiCorp Vault, enabling the tool to be used inside AI agents and giving administrators the ability to define what privileges those agents hold. With Vault 2.2, we can now take advantage of the Agent Identity integration, which identifies the agent and its lifecycle state, along with the rights and privileges it [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting News\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-28T23:09:24+00:00\" \/>\n<meta name=\"author\" content=\"Justine Juyad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Justine Juyad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/\",\"name\":\"IBM extends Vault to AI agents, but revocation questions linger - Web Hosting News\",\"isPartOf\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\"},\"datePublished\":\"2026-10-28T23:09:24+00:00\",\"dateModified\":\"2026-10-28T23:09:24+00:00\",\"author\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\"},\"breadcrumb\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hostingdiscussion.com\/news\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IBM extends Vault to AI agents, but revocation questions linger\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/\",\"name\":\"Web Hosting News\",\"description\":\"Cloud and web hosting industry daily news\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\",\"name\":\"Justine Juyad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"caption\":\"Justine Juyad\"},\"description\":\"HostingDiscussion.com senior reporter\",\"sameAs\":[\"https:\/\/hostingdiscussion.com\/news\/\"],\"url\":\"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"IBM extends Vault to AI agents, but revocation questions linger - Web Hosting News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/","og_locale":"en_US","og_type":"article","og_title":"IBM extends Vault to AI agents, but revocation questions linger - Web Hosting News","og_description":"IBM has additionally enhanced HashiCorp Vault, enabling the tool to be used inside AI agents and giving administrators the ability to define what privileges those agents hold. With Vault 2.2, we can now take advantage of the Agent Identity integration, which identifies the agent and its lifecycle state, along with the rights and privileges it [&hellip;]","og_url":"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/","og_site_name":"Web Hosting News","article_published_time":"2026-10-28T23:09:24+00:00","author":"Justine Juyad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Justine Juyad","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/","url":"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/","name":"IBM extends Vault to AI agents, but revocation questions linger - Web Hosting News","isPartOf":{"@id":"https:\/\/hostingdiscussion.com\/news\/#website"},"datePublished":"2026-10-28T23:09:24+00:00","dateModified":"2026-10-28T23:09:24+00:00","author":{"@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3"},"breadcrumb":{"@id":"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hostingdiscussion.com\/news\/ibm-extends-vault-to-ai-agents-but-revocation-questions-linger\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hostingdiscussion.com\/news\/"},{"@type":"ListItem","position":2,"name":"IBM extends Vault to AI agents, but revocation questions linger"}]},{"@type":"WebSite","@id":"https:\/\/hostingdiscussion.com\/news\/#website","url":"https:\/\/hostingdiscussion.com\/news\/","name":"Web Hosting News","description":"Cloud and web hosting industry daily news","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3","name":"Justine Juyad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","caption":"Justine Juyad"},"description":"HostingDiscussion.com senior reporter","sameAs":["https:\/\/hostingdiscussion.com\/news\/"],"url":"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/"}]}},"views":10,"_links":{"self":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/11116","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/users\/20624"}],"replies":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/comments?post=11116"}],"version-history":[{"count":1,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/11116\/revisions"}],"predecessor-version":[{"id":11117,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/11116\/revisions\/11117"}],"wp:attachment":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/media?parent=11116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/categories?post=11116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/tags?post=11116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}