Can't access RDS instance externally
I'm going to go ahead and answer my own question here for anyone else who finds themselves in this situation (probably not because you'll be smarter than I was) - Don't choose the default subnet group which includes all your private subnets... make a new subnet group with only your public subnets! Problem solved!