A DevOps engineer needs to deploy a new cloud application using containers. The application requires access to sensitive configuration information, such as database credentials, which should not be stored in the container image or in source code. Which of the following solutions should the engineer use to securely manage this sensitive configuration information?
Configure the credentials as environment variables accessible within the container.
Use a secrets management service to provide the credentials to the containers at runtime.
Write the credentials in a configuration file and include that file within the container image.
Store the credentials on persistent storage volumes shared with the containers.