Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  Blocking on RDS Instances

    Posted 03-24-2021 05:16
    Greetings,

    Understand that RDS Instances or DB PaaS, such as on AWS or Azure platforms, does not support blocking action.

    If the customer has a requirement for blocking or preventing unusual activities, how can DAM be useful in this case?
    #DatabaseActivityMonitoring

    ------------------------------
    Ho Larry
    Senior Presales Consultant
    M.Tech Products
    Singapore
    ------------------------------


  • 2.  RE: Blocking on RDS Instances

    Posted 03-31-2021 04:54

    Hi there,

    Thanks for posting.

    Did you get the information you required? I have found a couple of threads that may provide some more information, but please let me know if you need further help with this.

    Getting Started with Cloud Data Security for Amazon RDS (imperva.com)
    AWS Images | Imperva Cyber Community

    Thanks,



    ------------------------------
    Sarah Lamont
    Digital Community Manager
    ------------------------------



  • 3.  RE: Blocking on RDS Instances

    Posted 04-01-2021 14:16
    Depending on your use case, we support an immediate response using Sonar workflows.  If bad traffic is seen, you can trigger a workflow that will disable the user or take some other action (like block on the firewall).  

    I say it depends on your use case because it will not stop a "drop table" event, but works really well with data exfiltration.

    Jim

    ------------------------------
    Jim Burtoft
    SE
    State College PA
    ------------------------------