This is also similiar to Sneaker (https://github.com/codahale/sneaker https://github.com/codahale/sneaker), which is written in Go. It doesn't copy to other re

This is also similiar to Sneaker (https://github.com/codahale/sneaker https://github.com/codahale/sneaker), which is written in Go. It doesn't copy to other regions by default, but it's not hard to handle that on your own. This also uses KMS, but stores encrypted secrets in S3.