The database is located within a private network, and is not accessible from external sources.
Operational access is made via VPN connection, and Amazon GuardDuty is used as an IDS.
Additionally, since AWS Fargate and Amazon EKS Auto Mode are used as the underlying infrastructure, host protection is handled on the AWS side.