Some stellar marketing. GC should be offering Vault as a service. No one should be running a critical service like this unless you have a team large enough that can support it. Frustratingly AWS KMS + Credstash is as close to a managed vault that's available right now.
back
4 comments
Thanks for the feedback. I'll be sure that both our marketing team and product management team receive it :)
FD: I work for Google Cloud
AWS has a solution that awkwardly tucked under the "SSM" product, it's called the Parameter Store.
https://aws.amazon.com/systems-manager/features/#Parameter_S...
I really don't know why they don't spin it out into a separate product, I honesly had no idea it existed until my colleague just happened to stumble across it
Have you tried https://azure.microsoft.com/en-us/services/key-vault/? I haven’t played with it much yet, but it seems to tick the boxes.
Thanks! I'll check it out.
AWS SSM pretty decent as a middle ground.
Oh wow. I had no idea about uts credential store functions. Thanks!
I am using it as a secrets backend for concourse pretty extensively. It's just good enough for that if you lock down the parameters with IAM policies, allowing restrictive get and puts. I am a huge fan of vault, and have run it before when needed though.