I’m running a PHP application that connects to a RDS database using username and password to serve data to clients. The username and password are retrieved from AWS KMS as encrypted string using AWS SSM client. I do this for every single request to the PHP app to open up a connection to the database. So the flow looks something