We're aiming to abstract away our AWS dependencies -- KMS, S3, SES -- specifically to accommodate other clouds or non-clouds.

There is a nice library that abstracts a few core things like secret management for the major cloud platforms and some self hosted or local options.

https://gocloud.dev/howto/secrets/