Full AWS Practitioner Certification Question

A software company operates a multi-tier web application that stores its data in an Amazon Aurora MySQL database cluster. The application tier runs on Amazon EC2 instances. According to the companys internal security policy, database credentials must be securely stored, encrypted, and rotated every 14 days. What is the most efficient and least hands-on way for a solutions architect to implement this requirement?