Vault 1.20’s secret recovery lets you restore single secrets from snapshots
Vault Enterprise 1.20 adds a delegatable secret recovery that lets operators pull individual secrets from a loaded snapshot, avoiding a full cluster restore. It works via the CLI/API with a snapshot ID and requires recover permission, but has limits in replicated setups. This gives teams finer-grained disaster‑recovery without downtime.