KMS is not a centralized secret database -- it&#x27;s a hosted Hardware Security Module. There is no way to store your service&#x27;s secrets in it for later retrieval, unlike the solutions listed in the article. I suppose an argument could be made that it still provides a single point of failure, however the risk level of KMS and the SLA it provides is far lower than what one might encounter by maintaining their own server cluster.