A company uses different APIs to generate text embeddings and must automatically rotate the API tokens every 3 months. Which approach satisfies this requirement?

Storing API tokens in AWS Secrets Manager is the most suitable approach because Secrets Manager is designed for storing and automatically rotating secrets like API keys, database credentials, and OAuth tokens. It offers built-in integration with AWS Lambda for custom rotation logic, which is essential for rotating external API tokens every three months. AWS Systems Manager Parameter Store can store secrets but lacks native automatic rotation capabilities, requiring more complex custom solutions. AWS Key Management Service (KMS) is a cryptographic service for creating and managing encryption keys, not for storing application secrets like API tokens directly. While KMS encrypts data, it doesn't provide secret storage or rotation mechanisms for the secrets themselves.