Glad to see this service exists. Until now I've been storing secrets in JSON files in Cloud Storage, and using KMS to encrypt the contents.
This is hopefully simpler to use and easier to audit.
This is hopefully simpler to use and easier to audit.
i especially like exemptions; the ability to _not_ log for specific service accounts/identities is very handy.