A development team stores a third-party payment gateway API key directly in their application's source code. The security team requires that the key be stored securely, retrieved by the application at runtime, and automatically rotated on a schedule. Which AWS service best meets these requirements?