Applications connect with client certificates issued inside your AWS account, so no database password sits in your applications to leak. Contact: bastion-config@fromkos.com