Labels

Aws (32) MySQL (20) Aurora (12) Rds (7) DynamoDB (6) Cloudformation (4) Python3 (4) Unix (3) MongoDB (1)

Friday, 26 October 2018

MySQL : InnoDB Transparent Tablespace Encryption (5.7)

Tablespace encryption uses a two tier encryption key architecture, consisting of
  • a master encryption key and
  • a tablespace keys.
When a tablespace is encrypted, a tablespace key is encrypted and stored in the tablespace header.
The decrypted version of a tablespace key never changes, but the master encryption key can be changed as required. This action is referred to as master key rotation.
A secure and robust encryption key management solution is critical for security and for compliance with various security standards
Tablespace encryption supports the Advanced Encryption Standard (AES) block-based encryption algorithm.

Thursday, 4 October 2018

DynamoDB backup and restore

  • On-demand backup allows you to create full backups of your Amazon DynamoDB table for data archiving, helping you meet your corporate and governmental regulatory requirements.
  • Point-in-time recovery (PITR) provides continuous backups of your DynamoDB table data.
  • for the last 35 days until you explicitly turn it off.
  • Fully Managed Backups are automatically encrypted, cataloged, easily discoverable, and retained until you explicitly delete them.
  • Fast and Scalable You can enable PITR or create as many backups for tables of any size, and retain those backups as long as you need them
  • No Performance Impact PITR, backup, and restore do not consume any table provisioned capacity.
  • Additional charges enabling the backuphttps://docs.aws.amazon.com/amazondynamodb/latest/developerguide/BackupRestore.html
  • Backup and restore actions execute with zero impact on table performance or availability.

Essential Rsync guide

sync is a program that behaves in much the same way that rcp does, but has many more options and uses the rsync remote-update protocol to greatly speed up file transfers when the destination file already exists.

Mount Volume and formatting the disk

Add the disk to the server (can be done by EBS Volume or VirtualBox or others)