whats the recommended way of creating a second database inside a rds instance, im using postgresdb. the pulumi postgres provider seems to take connection parameters from the config file, but my password is generated with

random.RandomPassword

and its not stored in the configuration. that and is there a way to do it if my rds cluster is not publically accessible?

Maybe storing the password in a secret, and retrieving the password in the config, and for dbs running in a private subnet you can create a bastion box that you can use to setup a ssh tunnel to connect to the rds instance via the bastion box.