A CloudOps engineer is helping a development team deploy an application to AWS.

Use the AWS::SecretsManager::Secret resource with the GenerateSecretString property to automatically generate a password. Use the AWS::SecretsManager::RotationSchedule resource to define a rotation schedule for the password. Configure the application to retrieve the secret from AWS Secrets Manager to access the database.

Use the AWS::SecretsManager::Secret resource with the SecretString property. Accept a password as a CloudFormation parameter. Use the AllowedPattern property of the CloudFormation parameter to require a minimum length, uppercase and lowercase letters, and special characters. Configure the application to retrieve the secret from AWS Secrets Manager to access the database.

Use the AWS::SSM::Parameter resource. Accept input as a CloudFormation parameter to store the parameter as a secure string. Configure the application to retrieve the parameter from AWS Systems Manager Parameter Store.

Use a CloudFormation parameter with NoEcho enabled. Pass the password to the EC2 instance as user data.