Default PostgreSQL installations are permissive. This talk walks through a production hardening checklist: pg_hba.conf pitfalls, role inheritance traps, Row-Level Security (RLS) in practice, column-level privileges, SSL/TLS enforcement, audit logging with pgAudit, and secrets rotation patterns. Real examples of misconfigurations that led to data exposure.
PostgreSQL security beyond the defaults: hardening what you forgot to lock
Marcelo Fernandes
AWS
Hardening PostgreSQL beyond defaults: access control, RLS, TLS, auditing, secrets, and real-world misconfigurations.
Default PostgreSQL installations are permissive. This talk walks through a production hardening checklist: pg_hba.conf pitfalls, role inheritance traps, Row-Level Security (RLS) in practice, column-level privileges, SSL/TLS enforcement, audit logging with pgAudit, and secrets rotation patterns. Real examples of misconfigurations that led to data exposure.