The JusDB Database Engineering Blog
Deep dives on PostgreSQL, MySQL, MongoDB and more — performance tuning, high availability, migrations and production war stories from our DBAs.
Popular Searches
Latest Articles
Showing 7 of 7 articles
Database Connection String Security: Secrets Managers and Credential Rotation
Secure database credentials with AWS Secrets Manager, automatic rotation, Kubernetes secrets, and git-secrets scanning. Never hardcode connection strings.
MySQL User Permissions Best Practices: Least Privilege and Password Policy
Harden MySQL user permissions with host-scoped grants, validate_password plugin, account locking, and privilege auditing. Essential for SOC2 and PCI-DSS compliance.
PostgreSQL Privilege Management: Roles, Default Privileges, and Least Privilege
Implement least-privilege access in PostgreSQL with role hierarchies, ALTER DEFAULT PRIVILEGES, schema separation, and privilege auditing queries.
MySQL Audit Logging: MariaDB Audit Plugin, General Log, and Trigger-Based Auditing
Implement MySQL audit logging for SOC2, PCI-DSS, and HIPAA compliance. Covers MariaDB Audit Plugin, general query log, trigger-based auditing, and SIEM integration.
PostgreSQL TLS Configuration: Certificates, pg_hba.conf, and Client Verification
Configure PostgreSQL TLS with self-signed or CA-signed certificates. Force TLS via pg_hba.conf, set minimum TLS version, and verify server certs from clients.
AWS IAM Database Authentication for RDS and Aurora
Authenticate to RDS and Aurora using IAM credentials instead of passwords. Eliminates long-lived passwords with 15-minute token-based access. Covers PostgreSQL and MySQL setup.
MySQL Encryption at Rest and in Transit: InnoDB, TLS, and Binary Log Encryption
Encrypt MySQL data at rest with InnoDB tablespace encryption and in transit with TLS. Covers keyring plugin, require_secure_transport, and binary log encryption.
Get the latest database insights and expert tips delivered to your inbox.
Subscribe to our RSS feed for instant updates.
RSS Feed