A SysOps administrator must implement automatic rotation for database credentials used by Amazon RDS. The credentials should be rotated every 30 days and the approach must integrate with RDS while minimizing operational effort. Which option accomplishes this with the least overhead?

Storing credentials in AWS Secrets Manager and configuring its built-in automatic rotation is the most efficient solution. Secrets Manager natively integrates with Amazon RDS and offers pre-built rotation functions for various database types, including a 30-day rotation interval, minimizing operational overhead. Storing credentials in AWS Systems Manager Parameter Store as a secure string does not provide built-in automatic rotation for database credentials, requiring custom solutions. Placing credentials in an S3 bucket and using a Lambda function for rotation is a custom solution that adds significant operational complexity compared to Secrets Manager's native integration. While Secrets Manager can use custom Lambda functions, its pre-built RDS integration is simpler and requires less effort than implementing a custom function for a standard rotation.