There's also a new port forwarding parameter on session manager so you can easily connect to a private RDS via a bastion host.

https://aws.amazon.com/about-aws/whats-new/2022/05/aws-syste... https://docs.aws.amazon.com/systems-manager/latest/userguide...