AWS has a product called Security Hub. There's a rule which will alert for any RDS instances open to the internet:

https://docs.aws.amazon.com/securityhub/latest/userguide/sec...