Yeah, and now all your creds are available for everyone to see. Instead use IAM authentication for RDS, or if it's impossible, store creds in SSM or Secrets Manager.

Yeah, it's not fully transactional, but it will work fine in practice.

State is just a poor crutch.