Hey, I need help with #AWS #RDS.

I've this #Postgresql #RDS in private subnets.
I want to access it with the #psql cli (or any client really).

I see two ways.
One, which I find easy, with an #EC2 that acts as a #Bastion with #SSM so it remains private but requires a tunnel.
And one with a #RDSProxy exposed via a #NLB which is more involved but requires no tunnel.

Is there any other approach?
Something so obvious I missed it?

Thanks for your time and boosts in advance 🙇

EDIT: solution below