Provision Encrypted Database (Postgres) AWS

[knocknarea]

Is it possible for boxfuse to enable encryption for a database that it provisions on AWS?

It's only possible to do this on database creation.

[axelfontaine]

This is not yet supported, but it has a firm place on our roadmap.

[knocknarea]

@axelfontaine

Let's say you have configured an app (spring + database) and have it happily deployed on a staging environment where you don't mind that it's a provisioned database. However, for production you want to use an encrypted database (and so need to provision and configure it yourself)

Is it possible to deploy it to production on a non-provisioned basis, i.e. db.type=none or do I have to tear it all down and start again by recreating the app with the db.type=none

BTW: this is a bit urgent for us...

[axelfontaine]

This is not possible. A DB is either provisioned for each environment or none at all.

You do have a number of options though:

• manually provision a second DB and refer to that one instead
• snapshot, encrypt, and restore the provisioned DB
• create a 2nd app without DB provisioning and deploy it to prod

[knocknarea]

@axelfontaine Thanks for the swift reply and advice. Luckily with boxfuse I can just tear it down and bring it back up easily enough.

When you say refer to the manually created second database, how do I do that?

[axelfontaine]

You can for example activate a different Spring profile with the alternative config.

[knocknarea]

@axelfontaine Very good. Thanks for your help on this. All sorted now.

[axelfontaine]

Duplicate of #143