How do applications get secrets at runtime on AWS?

Write or say your answer first, then compare it with the model answer.