pg.ddx.io pgsql-performance@postgresql.org mailing list archive
help / color / mirror / Atom feedHow to encrypt database password in pgpass or unix file to run batch jobs through shell script
2+ messages / 2 participants
[nested] [flat]
* How to encrypt database password in pgpass or unix file to run batch jobs through shell script
@ 2020-09-25 09:34 aditya desai <admad123@gmail.com>
2020-09-25 19:51 ` Re: How to encrypt database password in pgpass or unix file to run batch jobs through shell script Bruce Momjian <bruce@momjian.us>
0 siblings, 1 reply; 2+ messages in thread
From: aditya desai @ 2020-09-25 09:34 UTC (permalink / raw)
To: pgsql-performance@lists.postgresql.org
Hi,
We have Amazon RDS Postgres. Currently we are using .pgpass file and
running psql from different EC2 instances to connect to DB. But the
password in this file is not encrypted. What are our options to encrypt the
password? Or do passwordless connection from EC2 to database? Lambda
functions have limitations of running only for 15 minutes.
How can we setup different authentication methods for AWS RDS Postgres as
we don't have access pg_hba.conf?
Regards,
Aditya.
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: How to encrypt database password in pgpass or unix file to run batch jobs through shell script
2020-09-25 09:34 How to encrypt database password in pgpass or unix file to run batch jobs through shell script aditya desai <admad123@gmail.com>
@ 2020-09-25 19:51 ` Bruce Momjian <bruce@momjian.us>
0 siblings, 0 replies; 2+ messages in thread
From: Bruce Momjian @ 2020-09-25 19:51 UTC (permalink / raw)
To: aditya desai <admad123@gmail.com>; +Cc: pgsql-performance@lists.postgresql.org
On Fri, Sep 25, 2020 at 03:04:56PM +0530, aditya desai wrote:
> Hi,
> We have Amazon RDS Postgres. Currently we are using .pgpass file and running
> psql from different EC2 instances to connect to DB. But the password in this
> file is not encrypted. What are our options to encrypt the password? Or do
> passwordless connection from EC2 to database? Lambda functions have limitations
> of running only for 15 minutes.
>
> How can we setup different authentication methods for AWS RDS Postgres as we
> don't have access pg_hba.conf?
There is no encryption facility, though you can used the hashed value
rather than the literal password. To encrypt, you would need to decrypt
it and then pass it to libpq, but there is no _pipe_ facility to do
that.
--
Bruce Momjian <bruce@momjian.us> https://momjian.us
EnterpriseDB https://enterprisedb.com
The usefulness of a cup is in its emptiness, Bruce Lee
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2020-09-25 19:51 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2020-09-25 09:34 How to encrypt database password in pgpass or unix file to run batch jobs through shell script aditya desai <admad123@gmail.com>
2020-09-25 19:51 ` Bruce Momjian <bruce@momjian.us>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox