When it comes to AWS remote database management, if you can't install the agent directly on the private host, you can set up a bastion running the agent.
On a recent project, we needed to add a new AWS Lambda that would touch an already existing relational database service (RDS) instance. Here's our solution.