CDK has a notion of using a lambda to provision the db after the RDS is created. This includes, roles, db, schema, etc... it's a smidge fussy, but a great way to run some code of your choosing to get the inside of the db correct. Previously, I did this with ansible as part of the app setup with a "initial provision" flag for the app's role that then ran a setup task from the checked out app code, which allowed me to delegate ownership fo the setup to the people who knew best, the devs