Which AWS service is intended to securely store and encrypt database passwords and other secret values?

AWS Secrets Manager is the correct service for securely storing and encrypting database passwords and other secret values. It enables you to rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. This helps improve your security posture by preventing hardcoding secrets in application code. AWS Shield is a denial-of-service (DDoS) protection service. AWS Identity and Access Management (IAM) manages access to AWS services and resources but doesn't store secrets itself. Amazon Cognito provides user authentication, authorization, and user management for web and mobile apps.