[yuppie_scum]

AWS Secrets Manager or Parameter Store. No infrastructure needed for these, just IAM.

Alternatively there is Hashicorp Vault which is an industry darling but can be a bitch to set up and operate.