Connect RDS for PostgreSQL with Secret Manager

pgconnect.sh

export RDSHOST="rds.hostname"
export SECRETID="secret-id"
export SECRETSTRING=$(aws secretsmanager get-secret-value --secret-id "${SECRETID}" --query SecretString --output text)
export PGHOST="${RDSHOST}"
export PGUSER=$(echo "${SECRETSTRING}" | jq -r '.username')
export PGPASSWORD=$(echo "${SECRETSTRING}" | jq -r '.password')

policy_ec2.txt

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "secretsmanager:GetSecretValue",
            "Resource": "secret-arn"
        }
    ]
}