A city's permit API should load the database password at runtime instead of hard-coding it in application source. Which AWS service is designed to store and retrieve that kind of secret?
Select an answer to reveal the explanation.
Short Explanation
Hard-coding a database password is like writing the vault combination on the office whiteboard. Secrets Manager keeps that password as a managed secret the app can fetch when it needs it — and you can rotate it without rewriting the code.
Full Explanation
AWS Secrets Manager stores secrets such as database credentials and API keys so applications retrieve them securely at runtime instead of embedding them in code or config files. It supports rotation and fine-grained access control via IAM. Cloud Practitioner items commonly contrast Secrets Manager with unsafe hard-coding practices.