Skip to content

Commit 860944a

Browse files
committed
Add security information
1 parent e8ea310 commit 860944a

File tree

1 file changed

+5
-8
lines changed

1 file changed

+5
-8
lines changed

content/operate/rc/databases/rdi/_index.md

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -31,14 +31,11 @@ For more info on how RDI works, see [RDI Architecture]({{<relref "/integrate/red
3131

3232
### Pipeline security
3333

34-
Regarding pipeline security:
35-
Source credentials and TLS secrets are all coming from AWS secret manager to RDI using AWS Secret Manager CSI driver for secrets which is the best practice
36-
The connectivity to the source database is via AWS private link so that RDI is only exposed to the specific end point and not to the entire customer VPC
37-
The connectivity to source database is JDBC secured connection with TLS
38-
The data is written from the source to Redis streams over secured RESP + TLS
39-
The data is then processed in memory by RDI - reading it over TLS secured RESP connection and writing it to the target Redis using TLS secured connection
40-
RDI resides within Redis Cloud VPC
41-
There is no Ingress connections to RDI except from Redis Cloud management services
34+
Data pipelines are set up to ensure a high level of data security. Source database credentials and TLS secrets are stored in AWS secret manager and shared using the AWS Secret Manager CSI driver for secrets. See [Share source database credentials]({{<relref "/operate/rc/databases/rdi/setup#share-source-database-credentials">}}) to learn how to share your source database credentials with Redis Cloud.
35+
36+
Connections to the source database are through [AWS PrivateLink](https://aws.amazon.com/privatelink/), ensuring that the data pipeline is only exposed to the specific database endpoint. See [Set up connectivity]({{<relref "/operate/rc/databases/rdi/setup#set-up-connectivity">}}) to learn how to connect your PrivateLink to the Redis Cloud VPC.
37+
38+
RDI encrypts all network connections with TLS. The pipeline will process data from the source database in-memory and write it to the target database using a TLS connection. There are no external connections to your data pipeline except from Redis Cloud management services.
4239

4340
## Prerequisites
4441

0 commit comments

Comments
 (0)