A service needs a database password that changes periodically. Which OCI facility should be evaluated?

1. Vault secret storage with controlled access and a tested rotation and consumer-update process.
2. A budget tag containing both old and new passwords.
3. A resource display name containing the password.
4. An unencrypted public repository variable.