What should a solutions architect recommend meet these requirements?

A company has an application that calls AWS Lambda functions. A recent code review found database credentials stored in the source code. The database credentials needs to be removed from the Lambda source code. The credentials must then be securely stored and rotated on a on-going basis to meet security policy requirements.

What should a solutions architect recommend meet these requirements?
A . Store the password in AWS CloudHS
B . Associate the Lambda function with a role that can review the password from CloudHSM given key I
D . Store the password in AWS Secrets Manager . A associate the Lambda function with a role that can retrieve the password from secrets Manager given its secret I
F . Move the database password to an environment variable associate the Lambda function Retrieve the password from the environment variable upon execution.
G . Store the password in AWS Key Management Service (AWS KMS). Associate the Lambda function with a role that can retrieve the password from AWS KMS given its key I

Answer: B