The database is installed in a private network and is in a state where it cannot be accessed from the outside.
We connect via VPN for operational access and use Amazon GuardDuty as our IDS.
Additionally, since we use AWS Fargate for our infrastructure, host defense is handled by AWS.