Blog

Giving developers access to a private Cloud SQL instance without static IP allowlists or shared passwords. Covers the Cloud SQL Auth Proxy TLS 1.3 tunnel, IAM Database Authentication with Google Workspace identities, engine-specific database flags, and Terraform for the instance, users, and project-level bindings.

Reaching a private RDS PostgreSQL instance from a developer laptop with no static password, no bastion login, and no VPN. Combines AWS SSM Session Manager port forwarding to a headless target with IAM Database Authentication, where the IAM token replaces the DB password. Covers the Terraform to enable iam_database_authentication on the RDS instance and the SQL grants to bind IAM identities to Postgres roles.

Using az monitor to measure CPU, memory, and IO utilization on an Azure Database for PostgreSQL Flexible Server, then deciding whether to downscale a Standard_D2s_v3 SKU based on the observed headroom.

Reference of frequently used psql meta-commands and SQL queries against pg_roles, pg_catalog, and information_schema for listing databases, roles, schemas, tables, and privileges.