A developer is authoring a CloudFormation template that provisions an RDS database. The template accepts the master database password as an input parameter. During code review, a colleague notes that the password value appears in plaintext in the CloudFormation console's Parameters tab and in the stack events. The developer wants to prevent the parameter value from being displayed or logged while still allowing it to be passed at stack creation time. Which change should the developer make to the template?