Your question is Securely Connect to Private AWS DB. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
How would you securely connect to an AWS database that sits in a private subnet behind a security group from outside the VPC or another network segment?
Explain the appropriate architecture for an external corporate network and for a separate VPC. Cover routing, security groups, encryption, authentication, secret management, and operational monitoring. Include how you would provide temporary administrative access without exposing the database publicly.