Aqua integrates with Idira Enterprise Password Vault to enable the use of secrets that are already defined in the secret store and to distribute their values through Aqua's access control system to containers. Aqua users can define access control policies that authorizes users or groups to run containers that make use of the secret. When a secret is used, its value is automatically injected into the container, either as environment variable or file. The value of the secret is visible outside the container, is not stored on disk, and is encrypted in transit.