Tag: Encryption

Feed: What's New. AWS Database Migration Service (AWS DMS) and the AWS Schema Conversion Tool (AWS SCT) make it easier for you to migrate your Apache Cassandra NoSQL databases to Amazon DynamoDB. Using AWS DMS and the AWS SCT, you can now migrate your Cassandra databases to DynamoDB and then replicate ongoing changes to your DynamoDB tables. After you have migrated a Cassandra database, you can benefit from the consistent, single-digit millisecond latency at any scale of DynamoDB. Migrating from Cassandra to DynamoDB enables developers to focus on building products rather than managing and maintaining database infrastructure. The DynamoDB serverless provisioning ... Read More

Feed: Planet MySQL; Author: Airbnb Engineering; Production Secret Management at AirbnbOur philosophy and approach to production secret managementKeys are handed off during a check-in in ShanghaiAirbnb is a global community built on trust. The Security team helps to build trust by maintaining security standards to store, manage and access sensitive information assets. These include secrets, such as API keys and database credentials. Applications use secrets to provide everyday site features, and those secrets used to access production resources are particularly important to protect. This is why we built an internal system we call Bagpiper to securely manage all production secrets.Bagpiper is a ... Read More

Feed: Blog. Author: Kim Brushaber; October is National Cybersecurity Awareness Month. In preparation for that, I thought I might take a moment to ponder some security issues that occured in the last week or two.  Recently, British Airways made the news for a data breach that occurred in August and September. The 380,000 customers affected are nowhere near as big as the $146 Million we saw last year with Equifax. However, British Airways will likely be the first major company to be investigated for their data breach after GDPR took effect in May of this year. All eyes are squarely focused ... Read More

Feed: What's New. You can enable node-to-node encryption when creating any domain running Elasticsearch 6.0 or greater. No additional fees apply. To learn more, please refer to our documentation.  Amazon Elasticsearch Service is available across 16 regions globally: US East (N. Virginia, Ohio), US West (Oregon, N. California), AWS GovCloud (US), Canada (Central), South America (Sao Paulo), EU (Ireland, London, Frankfurt, Paris), and Asia Pacific (Singapore, Sydney, Tokyo, Seoul, Mumbai) ... Read More

Feed: Planet MySQL; Author: ScaleGrid.io; In this blog post, we review some of the important aspects of configuring and managing SSL in MySQL hosting. These would include the default configuration, disabling SSL, and enabling and enforcing SSL on a MySQL server. Our observations are based on the community version of MySQL 5.7.21. Default SSL Configuration in MySQL By default, MySQL server always installs and enables SSL configuration. However, it is not enforced that clients connect using SSL. Clients can choose to connect with or without SSL as the server allows both types of connections. Let’s see how to verify this ... Read More

Feed: Microsoft Azure Blog. Author: Michael Hauss. Financial Services organizations regulated by the Securities and Exchange Commission (SEC), Commodity Futures Trading Commission (CFTC), Financial Industry Regulatory Authority (FINRA), Investment Industry Regulatory Organization of Canada (IIROC), Financial Conduct Authority (FCA), and more are required to retain business-related communications in a Write-Once-Read-Many (WORM) or immutable state that ensures they are non-erasable and non-modifiable for a specific retention interval. The immutable storage requirement is not limited to financial organizations but also applies to industries such as healthcare, insurance, media, public safety, and legal services. Today, we are excited to reveal the general availability ... Read More

Feed: AWS Government, Education, & Nonprofits Blog. Author: publicsector. AWS services are used throughout the United States by state, local, and federal law enforcement agencies. Customers can create customized cloud-based environments for CJI workloads with training and helpful resources provided by AWS to meet CJIS requirements. Backed by the secure and tested AWS network, customers can feel comfortable putting sensitive workloads in AWS.Many customers that manage sensitive data – including law enforcement agencies, child welfare agencies, motor vehicle departments, financial institutions, and healthcare organizations – are comfortable deploying workloads on AWS GovCloud (US) as the region is designed to meet ... Read More

Feed: Planet MySQL; Author: MySQL Performance Blog; Jericho Rivera | September 17, 2018 |  Posted In: MySQL, Percona Server for MySQL, Security PREVIOUS POST This is the first of a two-part series on using the keyring_vault plugin with Percona Server for MySQL 5.7. The second part will walk you through on how to use Percona Xtrabackup to backup from this instance and restore to another server and set it up as a slave with keyring_vault plugin. What is the keyring_vault plugin? The keyring_vault is a plugin that allows the database to interface with a Hashicorp Vault server to store and secure encryption keys ... Read More

Feed: DivvyCloud. Author: David Mundy; An organization that has transitioned to a cloud provider such as Amazon Web Services, Microsoft Azure, Google Cloud Platform, or any combination thereof should immediately be thinking about the configuration of cloud services as a key element to security. Many IT leaders and professionals make the mistake of approaching security in the cloud the same way they approached security in a traditional data center. However, in the software-defined world of public cloud, there is an added wrinkle.  Without a holistic approach to security which includes a view of configuration, you can easily open yourself up ... Read More

Feed: Planet MySQL; Author: The Pythian Group; Recently our team was tasked to implement MySQL 8.0 in production for a client. While MySQL 8.0 is looking very promising and has a lot of cool new features and revamped old features, it’s still pretty young. The MySQL development team is working very hard on stabilizing the product but, reading the latest release notes for version 8.0.12, it is still very much a bugfix release and not something you will want to put in production immediately. Also, given the fact that a lot of tools such as Percona Xtrabackup do not support ... Read More