CloudSQL - PostgreSQL

Overview

• Reduce Over Privileges - Discover existing privileges to CloudSQL PostgreSQL databases and convert them to on-demand access flows to reduce over-privileges.
  • Self Service Access - Empower your developers to gain self-servable access to databases using Slack.
  • Automated Approval Workflows - Create approval workflows to specific sensitive databases.
  • Restricted Third Party Access - Grant third-party (customer or vendor) time-based access to specific databases with MFA verification.
  • Review Access - View a detailed access audit of who was granted access to which databases with what permission level and why.

How to integrate CloudSQL PostgreSQL

📘

Have you connected a GCP project?

Make sure you have first integrated a GCP project with Apono. If not, follow this GCP Integration step-by-step guide.

Once we have our Google account connected, the GCP will look like this:

If it doesn't, there maybe a problem with the Google Connector installed. Please see the Connector is installed here.

Now that the Google Connector is looking good, let's install our CloudSQL PostgreSQL:

1. Click on Integrations Catalog
2. Under GCP, look for CloudSQL - PostgreSQL and click Connect

3. Specify the integrations details:

• Integration name – type the name of the integration
  When building an Access Flow you will reference this name
• Select the Cloud Account – specify the Cloud account where this PostgreSQL resides
• Hostname – specify the hostname of the PostgeSQL you are connecting

Identify the secret
If you chose a Connector installed on an GCP account you will need to enter a Secret ID from within your GCP Secrets Manager

• Project - the project ID
• Secret ID - Choose the Secret ID that is used to access this PostgreSQL with admin privileges. If you don't have one you can create one using this GCP guide.
  Look for the Secret ID in your Secret Manager (via Google console)
• Click Connect

📘

Multiple CloudSQLs to integrate? Use the API

You can check out the Apono API reference to easily integrate multiple integrations.

👍

Hurray!!

You've successfully integrated a CloudSQL PostgreSQL. You should see the new integration in your Connected Integrations.
You can now use this integration in your existing or new Access Flow. Check this guide out for more information on creating your first Access Flow in Apono.