Is it possible to automate changing a user account pwd used by OEM to monitor a MySQL RDS instance

As a Proof of Concept I added a MySQL 5.7.22 RDS instance to OEM Cloud Control 13C (13.3.0.0.0). Since MySQL RDS doesn't support using the Oracle Management Agent, I configured OEM to connect to the target using a MySQL user account. However, the organization requires database user accounts on the RDS instances be rotated daily using AWS Secrets Manager. Having to update the password daily for the user account would make using OEM to monitor the instance virtually impossible. Is there a way to automate the process of updating the password within OEM (e.g. An API built into OEM)?

If not, is there another way to connect to the MySQL RDS instance without having to pass credentials? I considered using IAM authentication, but it doesn't appear to be a viable option either.