Which AWS service can a company use to rotate, manage, and retrieve database credentials?

Explanations:

AWS Certificate Manager (ACM) is used for managing SSL/TLS certificates, not for database credentials.

AWS Secrets Manager is specifically designed to rotate, manage, and retrieve database credentials securely.

Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior in AWS accounts, not for credential management.

AWS Shield is a managed DDoS protection service, and it does not provide functionality for managing database credentials.