Also... and then my coworker had forgotten to put my keys on a bastion host... and the devs that built the templates for got to add security group rules to allow any access to the dbs... for things like first time configuration.
So much fun but I learned the things... and fixed the things.. and made better documentation for the process and future...