Just a note. If you are using AWS then you should be using Roles so that no credentials (key, secret key) are needed. Database connections should be stored in Secrets Manager.