fix(secretsmanager,rds): rotate secrets that an AWS service manages (#2378)