Connect to RDS (PostgreSQL) in a Private Subnet via AWS Client VPN

Introduction Placing RDS in a private subnet protects it from unauthorized external access — but it also means you can no longer connect directly from your developer machine. This article walks you through a step-by-step guide to securely connect to a private-subnet RDS (PostgreSQL) instance using AWS Client VPN . Architecture Overview Developer PC │ │ UDP 443 (TLS / Mutual Certificate Authentication) ▼ Client VPN Endpoint (Public Subnet) │ │ Authorization Rule + Route Table ▼ Private Subnet │ │