An application requires secure storage of sensitive configuration data. The developer has chosen to use AWS Systems Manager Parameter Store and must write code to retrieve an encrypted parameter. Assuming the AWS SDK for Python (Boto3) is used and proper IAM permissions are set, which code snippet correctly retrieves an encrypted parameter named '/app/config/database-password' with decryption?
ssm_client = boto3.client('ssm') response = ssm_client.get_secret_value(SecretId='/app/config/database-password') password = response['SecretString']
ssm_client = boto3.client('ssm') response = ssm_client.get_parameter(Name='/app/config/database-password') password = response['Parameter']['Value']
ssm_client = boto3.client('ssm') response = ssm_client.retrieve_parameter(Name='/app/config/database-password', Decrypt=True) password = response['Parameter']['Value']
ssm_client = boto3.client('ssm') response = ssm_client.get_parameter(Name='/app/config/database-password', WithDecryption=True) password = response['Parameter']['Value']