[aprdm]

This is a good post. As usual it's a question of trade offs. Hashicorp can be quite pricey for a managed vault instance if you have a decent site and salaries for engineers to maintain an on prems vault can also be pricey.

Depending on the data, security requirements, legislation, your business and whatnot you can make some trade offs and see if you really need it.

If you have a monolithic Django App with < 15 devs not serving critical security content chances are you don't need it.