title: How to use secret manager to store database password?
body: <p>Is it good to have a password for the database which is generated by the secret manager? </p>
  
  <p>I am using it this way now. </p>
  
  <pre><code>Type: 'AWS::SecretsManager::Secret'
  Properties:
    Description: 'Description'
    GenerateSecretString:
      SecretStringTemplate: '{"username": "username"}'
      GenerateStringKey: 'password'
      PasswordLength: 40
      ExcludeCharacters: '"@/\'
  </code></pre>
  
  <p>What are the best practices? Do I need a separate secret manager for every RDS? What about storing other values in secret manager? Do I need one per application?</p>