Update 3 p.m. Pacific: This story has been updated to clarify that managing service credentials isn’t an AWS-only issue, and that AWS Secrets Manager works with external credentials as well.

Secrets Manager enables customers to store and retrieve application secrets via API or the AWS Command Line Interface (CLI) and rotate credentials with built in or custom AWS Lambda functions.