https://theindiecoder.cloud/posts/secrets-manager-api-vs-lambda-extension/