A company runs databases on Amazon RDS for PostgreSQL and requires a secure way to manage the master user password with a rotation every 30 days. Which solution meets these requirements with the LEAST operational overhead?

Integrating AWS Secrets Manager with Amazon RDS for PostgreSQL provides a fully managed solution for storing, retrieving, and rotating database credentials, including the master user password. Secrets Manager offers built-in, automated rotation for RDS databases, which can be configured for a 30-day interval with minimal operational overhead. Using Amazon EventBridge with a custom AWS Lambda function would require developing, testing, and maintaining the Lambda code for password rotation, increasing operational overhead. The modify-db-instance AWS CLI command can change the password, but it's a manual process and doesn't automate rotation. AWS Systems Manager Parameter Store can store secrets, but it does not natively provide automated password rotation capabilities for RDS databases; it would require custom automation similar to the Lambda function approach.