Using Vault to store AWS DMS credentials

I have two AWS DMS endpoints, one connecting to AWS RDS for Oracle and another one to AWS Aurora MySQL. Currently, the login passwords are provided through Terraform in clear texts. I wonder if there is a way to store DMS endpoint credentials in Vault.

The organization already has Vault secrets set up for applications. I have access to Vault secrets through the web UI, but I have no idea how applications use Vault. I am a DBA. Any advice is appreciated. Thanks.