Date: 2025-04-25
Time: 13:55–14:40
Room: East
Level: Intermediate
In an age where data breaches and unauthorized access are constant threats, safeguarding sensitive information is vital for organizations. With its robust security features, PostgreSQL offers a powerful toolset unmatched by any other commercial or open-source database. However, this extraordinary flexibility often feels overwhelming and turns permission management into a complicated task that is difficult to automate. Unsure of how to proceed, application developers resort to isolating data using a separate Postgres instance for each new project, thereby increasing the overall costs.
In this talk, we will demonstrate an alternative approach. Drawing from our experience at DRW, we present a solution that combines standardization and automation to efficiently secure over 200 production PostgreSQL instances, each with unique access control requirements, thus providing true multi-tenancy with unbreakable access control.