Well, I tried setting the new RDS DB instance to having the same security groups as my VPC (using VPCSecurityGroups: [sg-abc123, sg-xyz789, …etc…]), but got this…
An error occurred: RDSInstance - VPC Security Groups cannot be associated with non-VPC DB Instances.
…so it seems it still thinks my DB is not associated with a VPC