Ravi Sir's Cyber Security Cards › Interview Cards
What is the risk of a public RDS snapshot or open 3306?
What is the risk of a public RDS snapshot or open 3306? A public snapshot or open port 3306 can expose customer tables to theft or ransomware. Someone copies your snapshot to their account and reads every row. “Private subnet, SG from the app only, encryption at rest, least-privilege users, and no p
Read card text
What this card says
Short answer
A public snapshot or open port 3306 can expose customer tables to theft or ransomware.
Example
Someone copies your snapshot to their account and reads every row.
Say it in the interview
“Private subnet, SG from the app only, encryption at rest, least-privilege users, and no public snapshots.”
Why it matters
A shared snapshot is a full copy of your data in someone else’s hands.
Learn more in the lesson: 46.5 Domains, S3, RDS and Live-Project Security Questions