[remus]

I've used GCP secrets manager and it worked well. Pretty simple API and the option for providing your own encryption keys if you want it.