chamber

I agree that AWS Parameter store isn't great... that's why we use Chamber: https://github.com/segmentio/chamber Chamber is an open source wrapper for AWS Parameter Store. You add a secret by doing: `chamber write ENV_NAME SECRET_NAME SECRET_VALUE` And when you want to execute a command with those values in your environment... `chamber exec ENV_NAME -- yarn start:prod` Parameter Store comes with auditing tools and versioning. Chamber uses KMS for encryption. Also, you can control permissions (including namespacing) with IAM. My question is - what does Doppler provide that would make me want to switch? I'm weary about letting someone else own our secrets.

The web UI is bad, but tools like chamber (https://github.com/segmentio/chamber) are excellent, so there's no need to deal with the web UI.

Not OP, but I've recently worked with AWS Parameter Store a lot, and I've been very happy with it so far. We store all configuration (including secrets) using it. We started by using https://github.com/segmentio/chamber/, but because of the way we decided to structure our secrets we decided to write a clone of it ourselves (https://github.com/micvbang/confman-go). In practice, we have a client written in Python that grabs configuration from Parameter Store and puts it into the process' ENV variables at startup. This allows us to avoid vendor lockin in the rest of our code, since we still just fetch all config from the environment. I like it so far :)