I prefer credstash (https://github.com/fugue/credstash https://github.com/fugue/credstash) which uses KMS and stores encrypted values in dynamodb. It has built

I prefer credstash (https://github.com/fugue/credstash https://github.com/fugue/credstash) which uses KMS and stores encrypted values in dynamodb. It has built in ansible support via lookups too!