My bad: the AWS RDS database was not set on "Publicly accessible".
Changed that, and within seconds I could push via drizzle kit.