Secrets Management

Vault, AWS Secrets Manager, SOPS, and the hard problem of keeping credentials out of repos and config files.