The recommended libraries are still too low-level for me, for supported languages, I myself prefer using Google's Tink:
* Sane defaults and API
* Built-in integration with external KMS service
* Excellent documentation
* Sane defaults and API
* Built-in integration with external KMS service
* Excellent documentation
The first thing I notice is that Tink doesn't support Azure Key Vault.