A key difference is in kms you never know the actual secret (kms stores this on your behalf) . This is for use cases where you need the secret in application co

A key difference is in kms you never know the actual secret (kms stores this on your behalf) . This is for use cases where you need the secret in application code, like db creds. Looks like a cool product I noticed they dont include a revoke workflow though, the trickiest bit of key rotation