How do I allow an on-demand FargateTaskDefinition to access RDS?

[franck102]

Hi all,

I am using cdk to create a FargateTaskDefinition that is not part of a service, and will be executed on demand using aws run-task.

Is it possible to configure the task definition, or maybe the task role, so that the runtime tasks automatically have access to RDS?
I am currently using this network configuration when running the task, but this is painful and error-prone:

{ "awsvpcConfiguration": {
    "subnets": $PUBLIC_SUBNETS,
    "securityGroups": [
      "$SECURITY_GROUP"
    ],
...

Thanks!