Hacker News new | ask | show | jobs
by firesteelrain 18 days ago
If in Cloud, then go Cloud native. No reason to run Vault. But on prem, there are limited options and Vault fits the bill.

If you want auto unseal with HSM and don't have to worry about the unseal key shards, then you can hook it up the HSM. Of course, HSMs are expensive and you also have to buy a Vault license.

1 comments

Oh, I never thought about the "in Cloud" part.