Leapp looks fab way to solve the mess of managing multiple AWS credential profiles
Or managing port forwards from local through bastion to RDS or EC2 (with help from System Manager)
Plugs into LocalStack so can have a profile that runs code fully locally. That seems non-free tho
No VPN required, and free as well...