The API for create-db-instance for neptune does have flags --publicly-accessible and --no-publicly-accessible but the description of those flags is This flag should no longer be used. so maybe not? https://awscli.amazonaws.com/v2/documentation/api/latest/reference/neptune/create-db-instance.html