A data engineering team is building an ETL pipeline that requires secure access to a database hosted on Amazon RDS. The pipeline will run on AWS Lambda, and the team needs to manage the database credentials securely. Which AWS service should the team use to store and retrieve the database credentials securely for the Lambda function?