ansible-vault
AutomationPackage: ansible-core
Encrypts a variables file or a single value so a repository can hold it without exposing it: the first line becomes $ANSIBLE_VAULT;1.1;AES256. The password that opens it lives outside the repository — inside it, the lock and the key travel together.
What its options do in the lessons
From the same glossary the lessons render under their commands, so the two cannot disagree.
ansible-vault --stdin-name- Encrypts a single value read from standard input and prints it under that variable name, as a
!vaultblock to paste into a clear-text file. The value never goes through the command line, so never through the shell history.