Hacker News Reader

No one ever got fired for putting creds in AWS Secrets Manager. I'd take the hyperscaler every time because even if something happens, it is a very defensible decision.

It is probably safer if you enable HSM.

Sometimes compliance do help improve security. Hyperscalers have resources for that. They have resources and they do security well. Hyperscalers are treated as critical infrastructure.

One person's machine being compromised does not bring the whole org down.

Not necessarily _always_ (Azure anyone?) but for the others - absolutely.