O'Reilly logo

Cloud Security Automation by Prashant Priyam

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Database services

In OpenStack, all of the services, such as nova, neutron, Keystone, and Cinder, use the database to store the state and configuration details.

So, it's very critical to ensure security of the database used for OpenStack. Currently, OpenStack supports MySQL and postures SQL database.

In OpenStack, all of the services use a single database to store the configuration and state. There is no such policy defined at the granular level access of the database. This means that all of the services which need database access have been granted access and privileges to the database.

So, the nodes, having access to the database, have full permission to execute any statement such as drop, update, and insert.

Now, in this situation, if any ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required