I have an AWS RDS that I'm accessing securely via AWS SSM and Bastion. I do the following to start