It's weird how those keys need to be stored SOMEWHERE, especially for public-facing services that need to restart without intervention, and that the only place those keys then live is on some CLOUDACT-impaired service.
Zero trust is a fun goal we will never really achieve. Get off American pub-cloud providers.

For fake Internet points?