It’s weird how those keys need to be stored SOMEWHERE, especially for public-facing services that need to restart without intervention, and that the only place those keys then live is on some CLOUDACT-impaired service.

Zero trust is a fun goal we will never really achieve. Get off American pub-cloud providers.