Instance addresses can be public IP or private IP. Public IP means that the instance is accessible through the public internet. In contrast, instances using only private IP are not accessible through the public internet, but are accessible through a Virtual Private Cloud (VPC).
Recommended Mitigation
It is recommended to set databases access only to private will reduce attack surface.
Network misconfigurations
