Which AWS service lets you securely store and retrieve encrypted credentials on demand?

AWS Secrets Manager is the correct choice because it is a dedicated service for securely storing, managing, and retrieving secrets such as database credentials, API keys, and other sensitive data throughout their lifecycle. It offers automatic rotation of secrets, fine-grained access control, and integration with other AWS services. AWS Encryption SDK is incorrect because it provides client-side encryption and decryption of data, not secret management. AWS Security Hub is incorrect because it is a security posture management service that aggregates security findings from various AWS services, not a secret storage solution. AWS Artifact is incorrect because it provides on-demand access to AWS security and compliance reports and agreements, not a secret management service.