HN user

yungwarlock

8 karma
Posts3
Comments9
View on HN

I'm working on a tool in golang to handle requesting access to private and sensitive databases in Postgres. The goal is to help orgs reduce handing out long-lived postgres creds with broad permissions.

The flow is you declare the databases and tables you want to access and the specific permissions you want, an operator reviews it, if accepted it generates a temporary postgres user with those permissions you need. Also, all the connections to the database are proxied through the app, so the domain name and port are random and short-lived, so you don't expose internal database hosts. As an extra, all SQL statements during the user sessions are logged if you want to see that.

It's available at https://github.com/yungwarlock/pam_postgres

My primary goal of this is to drill myself as a product engineer working on a technical product.

Sorry to reply this late.

Am really glad you enjoy it. Warms my heart.

The game doesn't allow for repeating numbers. My thinking is that not allowing it makes it much easier to pinpoint the numbers. If I think a number exists, it would reduce the number of combinations and the game time.