Managing database roles with Active Directory and Heimdall Data
summary
Heimdall Data uses a database proxy to authenticate against Active Directory and extract groups, map them to roles, create database users at login and remove them on logout, supporting MySQL, Postgres, SQL Server, Aurora and Redshift. The product adds a web portal with Kerberos/2FA, approval chains, break‑glass and biometric options, a DB firewall and honeytoken detection, and generates audit trail reports (example: lists the ten people who currently have a given role) to enforce segregation of duties.
AI-written summary · about
chapters (11)
- 0:00Introduction to Heimdall Data
- 1:04Security principles and compliance issues
- 2:31Database superuser risks
- 3:53Current Active Directory integration limits
- 4:38Heimdall Data zero touch user management
- 6:04New database portal for access control
- 8:14Role management and auditing features
- 9:21Role editor and approval chains
- 10:05Break glass and biometric access
- 10:47Proxy layer and additional security features
- 12:11Q&A
related talks
27mAzure AD authentication with PostgreSQL Flexible Servers
40mPoastgreSQL Auditing, Authentication, and Security
27mWho's managing the credential for your data infrastructure?
52mJackDB Database Development in your web browser
46mUnderstanding Azure Active Directory for Data Professionals
44mWho's managing the credentials for your database?
45mManaging hybrid workloads with IAM Roles Anywhere, featuring
12mMDM: K11s Orchestration for Enterprise Data Quality at Scale