SOPS is really flexible and easy to work with once you get the hang of it. I haven't found any other good, vendor-neutral tools in the space. Seems like the ob

SOPS is really flexible and easy to work with once you get the hang of it. I haven't found any other good, vendor-neutral tools in the space. Seems like the obvious way to go for storing secrets for 'GitOps' and IaC in general. I like the way it lets you combine GPG + Amazon KMS + instance IAM roles to sorta help ensure that secrets can only be accessed on some boxes. I also like that it's not particularly Kubernetes-centric, so it's perfectly natural to use in simple ways in scenarios where Kubernetes would be major overkill.