RDS Postgres - How to avoid 'password' statement into log file

Question

Currently, we are using 'DDL' log model for Postgres RDS. However, this log does capture the password management statement. For example, if using the statement create user user1 with password 'some_secret_password', this password will be saved into a log file.

Is there any way we can avoid to save any password related information into the log? Can anyone please advise what parameter should be changed in order to not capture any password information?

Laurenz Albe · Accepted Answer · 2020-09-22 06:16:56Z

2

Use a different method to set the password. Neither psql's \password nor pgAdmin's "change password" dialog have this problem.

answered Sep 22, 2020 at 6:16

Laurenz Albe

257k22 gold badges312 silver badges388 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

jjanes Over a year ago

It will still log something, just not the plain text form. And for pgAdmin4, that is only true if you change your own password from the Object menu. If you change your own or someone else's password through the "properties" dialog of that user, it will get logged in plain text.

Collectives™ on Stack Overflow

RDS Postgres - How to avoid 'password' statement into log file

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related