How does this connect to the database? Does an agent have to run within your VPC?