On 2019-08-17 08:16, Antonin Houska wrote: > One problem that occurs to me is that PG may need to send some sort of > credentials to the KMS. If it runs a separate process to execute the command, > it needs to pass those credentials to it. Whether it does so via parameters or > environment variables, both can be seen by other users.
You could do it via stdin or a file, perhaps. Where would the PostgreSQL server ultimately get the KMS credentials from? -- Peter Eisentraut http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
