Utilize AWS Secrets Manager for storing the Root CA Cert with IAM policy access control.

Employ AWS Systems Manager Parameter Store for SecureString parameter storage and resource-based policy access management.

Leverage an Amazon S3 bucket for Root CA Cert storage with a resource-based policy for access.

Adjust Lambda code to fetch the Root CA Cert and update the runtime trust store internally within the Lambda handler.

Refactor Lambda code to acquire the Root CA Cert and modify the runtime trust store externally from the Lambda handler.