In an AWS CloudFormation deployment of a two-tier application with Amazon RDS, which solution enables random database password generation during deployment and automatic password rotation without application changes?