Which AWS service can the company use to meet these requirements?

Explanations:

AWS Secrets Manager is designed specifically for securely storing, managing, and retrieving sensitive information like database credentials. It allows for automatic rotation of secrets and provides access control and auditing features.

AWS Security Hub is a security service that provides a comprehensive view of security alerts and compliance status across AWS accounts. It does not manage or retrieve credentials.

AWS Shield is a managed DDoS protection service. Its primary function is to protect applications from distributed denial-of-service attacks and does not involve credential management.

AWS WAF (Web Application Firewall) protects web applications from common web exploits. It does not provide functionality for managing or retrieving credentials.