AWS Secrets Manager isn't as nice as Vault in a lot of ways, but at a starting price of $0.40/mo for 1 secret + as many clients as you'd want vs $1250/mo for a standard vault + 1 client, it's fine.
I see they have a SaaS product called Vault Secrets now and I bet that's exactly why that product exists.
So, they cost about 1 developer?
I mean, yes, it is a bit expensive. On the other hand, it also shows that it is nearly impossible to have an opensource product and be profitable at the same time, especially with dev/infra tooling like this.
> So, they cost about 1 developer?
Where lol. You live in a bubble.
Not in the US, for that matter.
1M is seven figures.
Counting is hard.
HN/founder culture is a bubble though.
And the original statement was Joel's and said you have to either charge something that the lowest level manager can approve on their own OR enterprise pricing. Basically you can charge $30 or $3000 but not $300.
For the record, Hashicorp vault was 10x the cost of our fully managed Identity system for a million+ unique logins a month.
I've got a github actions pipeline that stands up a kind cluster, installs cluster-api on it, uses cluster-api to stand up the control plane cluster and then copies over the cluster-api config to it along with argocd, and after that it's self-managing. We did have to do a little bit of terraform to get iam roles set up, but that's it.
Everything after that is pure argo cd, cluster-api and crossplane.
I work at something that's basically a startup incubator and we can stand up and manage the infrastructure for an entire enterprise, on either aws or azure (including stuff like SSO artifact storage and CICD pipelines), from a central control plane with just a few lines of yaml, and they can be deploying code within 30 minutes. And it's continuously reconciled, so there's no drift, and if we push out an update to something, it rolls out to everything within minutes.
planetscale - https://news.ycombinator.com/item?id=39618815
We've been leaning into Terraform-based Crossplane providers recently and the out of the box experience is so much better than using terraform cloud once you get crossplane set up, I can't imagine ever going back to vanilla terraform pipelines, and certainly not paying for terraform cloud.