Comment by ethanzh

AWS Secrets Manager with strong a strong least-privilege, regularly-reviews IAM configuration has worked well for us