Dynamic Discovery of AWS RDS databases using boundary host?

For targets, if you’re granting access to a specific target you don’t need the type parameter.

Full documentation on grant permission formats is here; there’s an example of how I granted access to different targets to different roles in this post.