Example of setting up RDS Proxy with AWS CDK

infra-stack.ts

const dbConnectionGroup: ec2.SecurityGroup = new ec2.SecurityGroup(
  this,
  "RdsProxyDBConnection",
  {
    vpc,
    securityGroupName: "rds-proxy-sg",
  }
);

dbConnectionGroup.addIngressRule(
  dbConnectionGroup,
  ec2.Port.tcp(5432),
  "allow db connection"
);

const proxy: rds.DatabaseProxy = new rds.DatabaseProxy(
  this,
  "CustomerRdsProxy",
  {
    proxyTarget: rds.ProxyTarget.fromCluster(dbCluster),
    secrets: [dbCluster.secret!],
    securityGroups: [dbConnectionGroup],
    dbProxyName: "orders-serverless-v2-rds-proxy",
    debugLogging: true,
    iamAuth: true,
    vpc,
    vpcSubnets: {
      subnetType: ec2.SubnetType.PRIVATE_ISOLATED,
    },
  }
);