Newsfeeds
Planet MySQL
Planet MySQL - https://planet.mysql.com
-
Using Percona Server for MySQL with Amazon KMS as Keyring
Percona Server for MySQL 8.0.28-20 introduces a new keyring component, component_keyring_kms, which allows using the AWS Key Management Service as a keyring. The component is also included in Percona XtraBackup 8.0.28, allowing backing up databases encrypted with this component. The feature is similar to the AWS keyring plugin included in MySQL Enterprise, but it is implemented as a component instead, and because of that, it requires a different configuration. Configuring AWS KMS The component uses a single Master Key on KMS, which has to be created manually before configuring the component. This key can also be changed later, and existing keys using the old key will remain usable, as long as the key still exists on KMS. To configure KMS, log in to the AWS Management Console, and set up a new CMK. This key can be later referenced in the component configuration either using its UUID, ARN, or an alias. Using an alias is recommended, as that allows changing the key without modifying the component configuration. The component also needs a user, identified with an authentication key and a secret key to access the KMS service, and this user should have permission to use the CMK. It is recommended to use a dedicated user for this purpose. Configuring Percona Server for MySQL To use the KMS component with Percona Server for MySQL, create a global, or local manifest file enabling the component:{ "components": "file://component_keyring_kms” }And then also create a global or local configuration file for the KMS component itself:{ “read_local_config”: “false”, "path": "/usr/local/mysql/keyring/keyring_kms_file", "read_only": "false", “region": "us-east-2", "kms_key": "<uuid_or_alias_of_kms_key>", "auth_key": "<user_authentication_key>", “secret_access_key": "<user_secret_key>" }The directory of the keyring file should exist, and the AWS credentials and key identifier have to be valid with the correct parameters, otherwise, component initialization will fail. The configuration file should be named “component_keyring_kms.cnf”, and for a global configuration, it should reside in the server directory, or for a local configuration, in the data directory. Because this file contains authentication information for the specified AWS user, the user should have the minimum permissions necessary, and the file should only be readable by the MySQL user. When these files are present and set up correctly, the server will start with the KMS component loaded and ready to be used. Encryption features can be enabled separately one by one. Data security The KMS component works similarly to component_keyring_file: it stores the MySQL encryption keys in a file, specified by the path value in its configuration file. The difference between the two components is that instead of storing the keys in plain text in the file, the keys are encrypted using the KMS service. This means that the data directory and the keyring data file aren’t enough to decrypt the database, access to the KMS service is also required.
-
Interactively explore & visualize your MySQL HeatWave data with Apache Zeppelin
In this article I will show you how to properly configure Apache Zeppelin in order to take advantage of the Analytics and Machine Learning capabilities of MySQL HeatWave the MySQL in-memory query accelerator. The post Interactively explore & visualize your MySQL HeatWave data with Apache Zeppelin first appeared on dasini.net - Diary of a MySQL experts.
-
OpenLampTech issue #33 – Substack Repost
The publication is growing and we are sharing the good stuff in this OpenLampTech newsletter issue. Developer interviews, a curated WordPress resource, and the LAMP stack coverage you expect are all coming at ya in issue #33… The Newsletter for PHP and MySQL Developers Receive a copy of my ebook, “10 MySQL Tips For Everyone”, absolutely free when you subscribe to the OpenLampTech newsletter. In OpenLampTech issue #33, we have great content covering: Symfony componentsIs SQL Programming?WordPress FSE vs dynamic templatingCakePHP CRUDLinux command-line practice articlesAnd, much much more…Don’t miss out on all the great things that are happening in the OpenLampTech publication. Support the content with a free subscription. Get your brand, product, or service the attention it needs with affordable classified ad placement in the OpenLampTech newsletter. Thank you for your support! Like what you have read? See anything incorrect? Please comment below and thank you for reading!!! A Call To Action! Thank you for taking the time to read this post. I truly hope you discovered something interesting and enlightening. Please share your findings here, with someone else you know who would get the same value out of it as well. Visit the Portfolio-Projects page to see blog posts/technical writing I have completed for clients. To receive email notifications (Never Spam) from this blog (“Digital Owl’s Prose”) for the latest blog posts as they are published, please subscribe (of your own volition) by clicking the ‘Click To Subscribe!’ button in the sidebar on the homepage! (Feel free at any time to review the Digital Owl’s Prose Privacy Policy Page for any questions you may have about: email updates, opt-in, opt-out, contact forms, etc…) Be sure and visit the “Best Of” page for a collection of my best blog posts. Josh Otwell has a passion to study and grow as a SQL Developer and blogger. Other favorite activities find him with his nose buried in a good book, article, or the Linux command line. Among those, he shares a love of tabletop RPG games, reading fantasy novels, and spending time with his wife and two daughters. Disclaimer: The examples presented in this post are hypothetical ideas of how to achieve similar types of results. They are not the utmost best solution(s). The majority, if not all, of the examples provided, are performed on a personal development/learning workstation environment and should not be considered production quality or ready. Your particular goals and needs may vary. Use those practices that best benefit your needs and goals. Opinions are my own. How can I help you? Free MySQL Query Syntax Mantra PDF cheat sheet. Remember the query syntax order with this mantra.Are you thinking of starting up a blog? I use WordPress for my blog. Let’s both save money on the plans offered. Get your brand, product, or service the attention it needs with affordable classified ad placement in the OpenLampTech newsletter.Need hosting for your next web application or WordPress site? I use and highly recommend Hostinger. They have great pricing and service.5 Truths I’ve Come To Realize As a Self-taught DeveloperDiscover premium MySQL learning material over in my Kofi Shop today!Disclosure: Some of the services and product links in this post are affiliate links. At no additional cost to you, should you make a purchase by clicking through one of them, I will receive a commission. The Newsletter for PHP and MySQL Developers Receive a copy of my ebook, “10 MySQL Tips For Everyone”, absolutely free when you subscribe to the OpenLampTech newsletter. Get your brand, product, or service the attention it needs with affordable classified ad placement in the OpenLampTech newsletter. Thank you for your support! The post OpenLampTech issue #33 – Substack Repost appeared first on Digital Owl's Prose.
-
Genius Sonority speeds game analytics by 90X with MySQL HeatWave
A blog post covering the Genius Sonority use case of MySQL HeatWave
-
Configuring an ODBC Driver Manager on Windows, macOS, and Linux
This article explains how to install and configure the ODBC Driver Manager on Windows, macOS, and Linux. Also, it shows how to configure the ODBC data source name. Contents What is ODBC Driver Manager? How to Install ODBC Driver Manager Installing and Configuring an ODBC Driver Manager on Windows Installing and Configuring an ODBC Driver […] The post Configuring an ODBC Driver Manager on Windows, macOS, and Linux appeared first on Devart Blog.
