A development team hardcodes database passwords in application configuration files, and updating these credentials across all applications is a manual, error-prone process. They want a service that securely stores database credentials and automatically rotates them on a schedule without code changes. Which AWS service should they use?