Redshift — Protecting Data at Rest

In this article, I am capturing the redshift security aspects from the perspective of protecting data at rest.

Photo by Chris Liverani on Unsplash

Overview

Redshift is one of the fastest, cost-effective and highly scalable data warehousing solutions. As its hosted on cloud, we need to push the organization data to an external environment. To ensure the data, sitting externally, is protected against the hacker attacks, we must keep our application and data secured with more caution.

When it comes to Redshift, security is a shared responsibility between AWS and US. The shared responsibility model describes this as security of the cloud and security in the cloud. AWS is responsible for protecting the infrastructure that runs AWS services in the AWS Cloud. for instance the VMs, Storage, Network, etc. AWS also provides you with services that you can use securely. For instance the access management, encryption services, etc.

Your responsibility is determined by the AWS service that you use. But typically it deals with protecting your data, following your organization’s guidelines, meeting the industry compliance needs like, PCI, SOX, Hippa, etc, or adhering to the region specific guidelines, for instance the GDPR.