Implement security controls for cloud database services.

• Disable public accessibility for RDS/managed databases
• Use IAM database authentication instead of static passwords
• Enable transparent data encryption (TDE)