PostgreSQL port is open to the world

metaspace2020 / sm-engine-ansible

Setting up cloud infrastructure for the engine using Ansible

Apache License 2.0

2 stars 6 forks source link

PostgreSQL port is open to the world #6

Closed sfrehse closed 8 years ago

sfrehse commented 8 years ago

Hi,

in the current AWS deployment, the PostgreSQL port is open to world. In our setting that is generally not applicable due to security constraints. Is that required in your setting or just for debugging purpose?

Stefan

intsco commented 8 years ago

Hi Stefan,

For the SM engine only access from the Spark master machine to the Postgres (web app) machine is required. You can restrict open ports in settings of the security group that you use for the web app instance.

Cheers, Vitaly