AWS Database Blog
Category: Security, Identity, & Compliance
Use Amazon RDS Proxy to provide access to RDS databases across AWS accounts
Amazon RDS Proxy is a fully managed, highly available database proxy for Amazon Relational Database Service (Amazon RDS) that makes applications more scalable, more resilient to database failures, and more secure. With RDS Proxy, you can handle unpredictable surges in database traffic that might otherwise cause issues due to oversubscribing connections or creating new connections […]
AWS Nitro Enclaves for secure blockchain key management: Part 3
In Part 1 of this series, we gave a high-level introduction to the AWS Nitro System and explained why Nitro is well suited for flexible and secure blockchain key management workloads. In Part 2, we guided you through the steps to configure aspects like AWS Key Management Service (AWS KMS) key policies and how to […]
AWS Nitro Enclaves for secure blockchain key management: Part 2
In Part 1 of this series, we provided a high-level introduction to the AWS Nitro System and explained why Nitro is well suited for flexible and secure blockchain key management workloads. In this post, we guide you through the steps to configure aspects like AWS Key Management Service (AWS KMS) key policies and how to […]
AWS Nitro Enclaves for secure blockchain key management: Part 1
Public blockchains are used for a variety of use cases, like decentralized finance (DeFi) apps, non-fungible token (NFT) apps, or cross-border payments. Blockchains differ in their protocol and consensus design, implementation language, and smart contract capabilities. Determining how external participants can be incentivized to join a network running their own node is key in economic […]
Multi-user secrets rotation for Amazon RDS
Most database deployments have multiple database users who have varying degree of privileges on the data stored in the database, database structure, and administrative operations. In multi-user database environments, it’s important to grant and limit the privileges of different users based on their roles and needs. It’s also a best practice to limit the lifespan […]
How to sign Ethereum EIP-1559 transactions using AWS KMS
Ethereum is a popular public blockchain that enables you to create decentralized applications across a variety of use cases. In 2020 and 2021, it became widely used for decentralized finance (DeFi) apps and non-fungible token (NFT) apps. Due to its permissionless nature, it’s available to every user by just setting up an Ethereum account. These […]
Manage your AWS DMS endpoint credentials with AWS Secrets Manager
When configuring AWS Database Migration Service (AWS DMS) endpoints, you previously had to maintain the source and target credentials in plain text. In December 2020, we announced the integration of AWS DMS and AWS Secrets Manager, which allows you to take advantage of the built-in credential management capability in Secrets Manager to manage, retrieve, and […]
Build and load test a multi-tenant SaaS database proxy solution with Amazon RDS Proxy
Many software as a service (SaaS) customers on AWS are familiar with multi-tenancy and tenant isolation. Indeed, customers using MySQL, for instance, may have adopted the bridge model of multi-tenancy, where each tenant has access to their own isolated database or schema. AWS provides many tools and best practices to get started, but achieving database […]
How to encrypt Amazon Aurora using AWS KMS and your own KMS key
When selecting a relational database engine, customers look at many different aspects, including management, performance, reliability, automation, and more recently, the ability to natively encrypt data at rest. Amazon Aurora provides a highly available, optimal, and scalable relational database engine that supports both MySQL and PostgreSQL. Amazon Aurora also supports native encryption of data at […]
Create an AWS DMS endpoint to a trusted third-party account via AWS Secrets Manager integration
When configuring AWS Database Migration Service (AWS DMS) endpoints, you previously had to maintain the source and target credentials, including auditing, updating, and rotating the database credentials themselves. On December 22, 2020, we announced the integration of AWS DMS and AWS Secrets Manager, which now allows you to manage and automatically rotate the source and […]