in lib/construct/database.ts [43:45]
allowInboundAccess(peer: ec2.IPeer) { this.securityGroup.addIngressRule(peer, ec2.Port.tcp(this.cluster.clusterEndpoint.port)); }