I need key management for a system I'm building. I need to encrypt documents per-role, and also sensitive fields in the DB per-role. I'm planning on using Amazo

I need key management for a system I'm building. I need to encrypt documents per-role, and also sensitive fields in the DB per-role. I'm planning on using Amazon KMS for both these tasks (the document encryption is straightforward with KMS + S3, and for the row level security I'll probably implement something similar to [0]) Does anyone have any insight how Vault would compare for these tasks? Or if I'm going down the totally wrong road? [0] https://blog.koan.co/securing-customer-data-with-kms-and-envelope-encryption-in-node-js-b61983ddaa98 https://blog.koan.co/securing-customer-data-with-kms-and-env...