Secrets manager is fine if you just have plain text secrets that you are happy to rotate yourself. Vault shines when you want more dynamic secrets - issuing IA

Secrets manager is fine if you just have plain text secrets that you are happy to rotate yourself. Vault shines when you want more dynamic secrets - issuing IAM creds from other forms of auth, issuing dynamic SQL db users, even issuing tls certificates. Edit: damn, ninja'd