SECURITY AT SCALE: PLAID'S JOURNEY TO CREATING A KEY MANAGEMENT SYSTEM

Summary from the TLDR InfoSec newsletter

Plaid launched an effort to build its own Key Management System (KMS) to curb bespoke cryptographic processes across different teams and services. It chose to build its own system over using a vendor-provided solution to avoid API limitations that would hamper scalability, lower costs, and be self-service. The migration process proved to be the most challenging part of building the system.