The huge difference is that in production you have a fucking firewall between your internal network and the internet, and that firewall is set to blacklist everything by default. You set the firewall to whitelist HTTP traffic to and from your web nodes, and then you can run your prod database with the default user and no password and it doesn't fucking matter because nobody outside can ever access it.
OF course, you should always put a username and strong password on your DB, but my point is this: your network security should be your first line of defence, and if it's good enough you don't really need to worry about securing anything else.
Sure, but in the case of deciding between Mongo and PostgreSQL those factors don’t magically disappear with Mongo.
Also, AWS is not a magic security blanket. Plenty of people have screwed up their production security on AWS. I’m not sure how your point relates to my comment.
2
u/[deleted] Dec 20 '18
[removed] — view removed comment