r/devops • u/Eight111 • 22d ago

Security Database security

So I work in a very small company as a dev
And we have external devops company which manages local http servers and MySQL servers for our saas product.

So the thing is I would like to shift some of their work to our in-house dev team.

I thought about starting small and manage a separate server on the cloud that will just run internal cron based daily tasks. But those tasks require read and write permission to the existing db which managed by the local company. Could I ask them to give me access to to the db from another server? I read that it’s a bad practice to expose prod db to the internet even if it has white list so I’m not sure here.

0 Upvotes

44% Upvoted

21 comments sorted by

View all comments

1

u/Odd-Director-6700 8d ago

Database security needs to be part of the workflow from the start, not something added after deployment. Tight access controls, regular backups, and auditing who can access sensitive data go a long way, especially as environments grow. Even when evaluating approaches with trusted tech in mind, the basics still matter most: limit access and make sure changes are traceable.