A company wants to improve data security for their Amazon RDS instances. They need to ensure that database credentials are never hardcoded in applications and that access to the database is authenticated using IAM roles. Which TWO steps are required? (Select TWO)

Enable IAM database authentication on the RDS instance.

Store the database password in AWS Systems Manager Parameter Store.

Attach an IAM policy to the RDS instance allowing it to assume roles.

Use AWS KMS to encrypt the database connection.

Attach an IAM policy to the application's execution role granting the rds-db:connect action.

Configure AWS Secrets Manager to rotate the IAM role credentials.