These standards can largely be abstracted away by using a cloud that already does it for you.

For example a good secret is using Azure. It seems more expensive until you notice it provides many security certifications.