Best Practices for Managing Data Breach Risks in AWS REDSHIFT

Managing Data Breach Risks in AWS Redshift

With the accelerating adoption of AWS Redshift as the next generation cloud-based data warehouse, it is imperative that organizations deploy the appropriate level of security to manage external and internal threats without impacting user experiences. We recommend the following six best practices for managing external and internal threats.

External Threat Management

1. Encrypt data files using server side or client side technology prior to uploading them to S3
2. Encrypt Redshift database to protect data at rest
3. Encrypt SSL Connection between SQL client and the database

Internal Threat Management

1. Identify and encrypt PII and PHI data fields prior to uploading the data files to S3
2. Preserve format and maintain referential integrity when encrypting data fields
3. Enable on-the-fly decryption for the privileged Redshift users and applications

To learn more, please see the following video or contact us at info@fe5.2b8.myftpupload.com

References:

1. http://breachlevelindex.com/
2. http://www.esecurityplanet.com/network-security/63-percent-of-enteprises-use-advanced-tech-without-securing-sensitive-data.htm

Contact Us