A new internal web application must securely store and retrieve multiple employee usernames and passwords using an AWS managed service, with the least operational overhead. Which solution meets these requirements?

Storing employee credentials securely with minimal operational overhead is best achieved using AWS Secrets Manager. Secrets Manager is designed for managing, retrieving, and rotating database credentials, API keys, and other secrets throughout their lifecycle. Its BatchGetSecretValue API allows efficient retrieval of multiple secrets. While AWS CloudFormation is suitable for provisioning and managing AWS resources, including Secrets Manager secrets, AWS Batch is a service for running batch computing workloads and is not directly involved in retrieving secrets for a web application. AWS Systems Manager Parameter Store can store secrets, but Secrets Manager offers enhanced features specifically for secret management, such as automatic rotation and fine-grained access control, making it the more appropriate choice for sensitive credentials like employee usernames and passwords.