If I have a web service which uses other 3rd party API and I want to store the keys securely, what are the best practices around that?<p>I've looked at vault (https://hashicorp.com/blog/vault.html) which seems ideal but still in production.<p>Also AWS's Key Management system (KMS)(https://aws.amazon.com/kms/) seems promising but only provides ways to store native AWS keys. Would I then create a database which held the keys encrypted using KMS keys and SQL access keys?
Another option, which is used in production by cloudflare:<p><a href="https://github.com/cloudflare/redoctober" rel="nofollow">https://github.com/cloudflare/redoctober</a>