Who's managing the credentials for your database?
summary
Claims that >80% of breaches trace to poor or reused passwords and that Shodan still finds 800,000 PostgreSQL instances publicly accessible. Demo provisions Postgres on AVN, enables HashiCorp Vault database secret engine, creates a role metrics-read-write and issues short‑lived dynamic credentials (TTL 1h, extendable to 24h), then shows authentication, fine‑grained authorization (can read public table but not employee_salary), audit logs with Vault audit hash for matching, and sealed/unseal + break‑glass procedures.
AI-written summary · about
chapters (9)
- 0:00Start
- 2:55Database Security
- 4:09Agenda
- 4:58Database Access
- 6:35Exploitation techniques with Shodan
- 9:34Dynamic Credentials
- 11:10Choosing the right tool
- 15:36Vault - Architecture
- 36:49Let's recap. Scan the QR
related talks
27mWho's managing the credential for your data infrastructure?
32mPostgreSQL Security: Defending Against External Attacks
53mDynamic Database Credentials
27mStop the (Password) Insanity! - Managing Credentials with HashiCorp Vault
32mThe End of Shared Passwords with Vault and Boundary
07mAll about Postgres security
30mHow secure is your database? Hacking Postgres with Hathi
31mModern Security with Microservices and the Cloud