This article confuses me. The author tears down a strawman argument about running centralized key services (&quot;The expensive solution&quot;), then recommends exactly such a solution in Amazon KMS.<p>The only plausible way this can make sense to me is if he said &quot;Running your own key service is a pain, use Amazon KMS&quot;. But that&#x27;s a simple service question, probably wouldn&#x27;t have taken up as much space.