diff --git a/packages/aws-cdk-lib/aws-rds/lib/database-secret.ts b/packages/aws-cdk-lib/aws-rds/lib/database-secret.ts
index d19c458f490ad..f1253ca3ea349 100644
--- a/packages/aws-cdk-lib/aws-rds/lib/database-secret.ts
+++ b/packages/aws-cdk-lib/aws-rds/lib/database-secret.ts
@@ -99,7 +99,7 @@ export class DatabaseSecret extends secretsmanager.Secret {
       const hash = md5hash(JSON.stringify({
         // Use here the options that influence the password generation.
         // If at some point we add other password customization options
-        // they sould be added here below (e.g. `passwordLength`).
+        // they should be added here below (e.g. `passwordLength`).
         excludeCharacters,
       }));
       const logicalId = `${Names.uniqueId(this)}${hash}`;