When I'm dealing with secrets in the cloud, I usually go for a dedicated secrets manager.

hey everyone, i'm trying to get my head around secret management, especially with more of our stuff going to the cloud. we've done a bit of everything, like environment variables and dedicated secret managers, but i'm wondering what you all think works best and is most secure. are you mostly using AWS Secrets Manager, HashiCorp Vault, or something else? what are the biggest problems you've run into, and how do you deal with rotating secrets and controlling who sees what