Secret Rotation Pipeline for ECS Fargate Applications

Act as an IAM and Secrets Management Expert. Design an uncompromising, fully automated secret rotation pipeline for an enterprise ECS Fargate application relying on AWS Secrets Manager. Configure an AWS Lambda function ([LAMBDA_ROTATION_FUNCTION]) to securely reach into the database, mutate the password, and update the [SECRET_NAME] strictly every [ROTATION_DAYS] days. Because Fargate tasks cache secrets injected as environment variables at boot, you must explicitly architect the programmatic process for notifying the running [SERVICE_NAME] to invalidate its cache and fetch the new credentials (e.g., using a sidecar reloader process, API polling, or forcing a rolling deployment). Provide the exact JSON IAM execution policies required to authorize this closed-loop rotation.