[TheNewsIsHere]

Different strokes for different folks. (Or at least, use cases.)

We’ve found at work that if you already have the talent, the hyper scale cloud platforms are amongst the most expensive ways to manage infrastructure if you go all in.

For example $0.40/secret/mo is _expensive_ compared to the cost of an HA vault (not necessarily Hashicorp) setup. If you have 1,000 secrets but you only need to access any given secret once a day, that’s a lot of expense against just setting up your own. And then you can take it with you.

Beyond that, we’ve had a LOT more reliable performance from our current VPS provider than we ever got from EC2.

That’s not to say AWS is exactly without competition. We use S3 extensively because nothing compares for our usage.

[benmmurphy]

If you don’t need secret manager features like region replication and rotation you can use system manager parameters and the secret type. It’s effectively free. We use secret manager but weren’t aware of the price difference.

[scarface74]

You probably don’t need secrets manager. Just use SSM Parameter Store secret string type. It’s free.