Fortifying Azure Database for PostgreSQL: Stop Intrusions in Their Tracks

on YouTube ↗29m

" summary

Covers concrete steps to lock down Azure Database for PostgreSQL: enable private endpoint (Feb 2024) to route traffic over the Azure backbone (multiple endpoints allowed, cannot switch connectivity mode after provisioning, extra cost), or keep public with firewall rules; configure passwordless via Entra managed identity for AKS + Spring Boot using workload identity and a federated credential, add the Spring Cloud Azure Starter JDBC PostgreSQL dependency, generate tokens for CI tooling like Flyway, and verify success by seeing the AKS token-exchange logs.

AI-written summary · about

" chapters (7)

1. 0:00Introduction
2. 0:40Azure Database for PostgreSQL - Security
3. 6:30Networking with Private Endpoint
4. 13:30Access Management: Authentication and Authorization
5. 16:13Authentication: Passwordless connection
6. 21:52Authorization: Entra ID
7. 27:02Access Management: Operational aspects

" related talks

• 32mWhat makes Azure Database for PostgreSQL Great for Developers?VARUN DHAWAN · POSETTE: An Event for Postgres 2024
• 26mWhat Enterprises like about Azure Database for PostgreSQL - Flexible ServerKanchan Bharati · POSETTE: An Event for Postgres 2024
• 56mSeamless Migration to Azure Database for PostgreSQLJean Joseph · Postgres Conference Orlando 2025
• 27mAzure AD authentication with PostgreSQL Flexible ServersAndrey Chudnovskiy · Citus Con: An Event for Postgres 2023
• 57mDeveloping powerful and intelligent apps using the Azure managed PostgreSQL serviceSunil Kamath · PostgresOpen Silicon Valley 2017
• 35mDeploying PostgreSQL to Azure with BicepPamela Fox · Citus Con: An Event for Postgres 2023
• 31mBuild scalable and secure enterprise apps on OSS databases Q&AAditi Gupta, Charles Feddersen, VARUN DHAWAN, Tim Fish, Mikayla Soucie, Sunil Agarwal, Swikriti Jain, Dinesh Madhusoodanan, Marcel van der Holst · Microsoft Build 2023
• 50mSecuring PostgreSQLChristophe Pettus · PGConf Silicon Valley 2016