Added a route table to the private subnet, changed some db security group settings as well.