No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Maybe storing the password in a secret, and retrieving the password in the config, and for dbs running in a private subnet you can create a bastion box that you can use to setup a ssh tunnel to connect to the rds instance via the bastion box.