I found vault a pain to setup and maintain. I think security solutions should be as simple as possible so people use them and understand them. What I like abou

I found vault a pain to setup and maintain. I think security solutions should be as simple as possible so people use them and understand them. What I like about SOPs is that we still leverage AWS keystore to store our master key, but we store encrypted secrets in git. This is helpful as we have a history of rotations (great for rollbacks, audits, etc). Additionally, SOPs doesn’t encrypt yaml keys, so one can tell what a secret is but not its values.