Connecting PMM running on Docker on EC2 instance to RDS MariaDB instance


I need to implement the following scenario:
I have EC2 instance and I have configured PMM running in docker container on it (we use a custom ami for all our apps so AMI from Marketplace will not work).
Now I want to add RDS MariaDB 10.2 instance for monitoring. But we use only users with “REQUIRE SSL” option enabled so pmm DB user has it as well.
The question is how to get PMM connected to a RDS instance if pmm DB user there is with enabled “REQUIRE SSL”?

And another question:
where should I run pmm-admin commands in my case? Should I install it on EC2 instance itself or should I run it from the docker container?

Thank you.

Can anyone please help me with this?