SSM Parameter StoreSecret manger
PriceLessExpensive
RotationNone, can be done via LambdaThrough lambda
EncryptionMandatory encryption with KMSOptinal via KMS (SecureString Type)
Can pull a secret with API?