RDS with reserved instances / VPC and some security rules. A LOT of maintenance goes away.
Who is managing these two dedicated boxes at OS and app level. Who is managing the networking of these boxes, including a non-internet accessible network subnet and a an internet gateway to let a white listed developer host box connect to a dev instance of database with some sample data?
Using secrets manager, which handles key rotation seems to work great on AWS, how does this work on the rented boxes.
Who sets up the slave, confirms replication is current to slave etc.
Who does the backups of all of this (in case of a DROP table).
I used to do things the harder way with rented boxes. BUT every-time someone tells me oh - just rent some boxes and you could do X much cheaper I roll my eyes. X is always a massive subset on security, durability with a massive uncounted overhead in other areas (waste of time).
Who is managing these two dedicated boxes at OS and app level. Who is managing the networking of these boxes, including a non-internet accessible network subnet and a an internet gateway to let a white listed developer host box connect to a dev instance of database with some sample data?
Using secrets manager, which handles key rotation seems to work great on AWS, how does this work on the rented boxes.
Who sets up the slave, confirms replication is current to slave etc.
Who does the backups of all of this (in case of a DROP table).
I used to do things the harder way with rented boxes. BUT every-time someone tells me oh - just rent some boxes and you could do X much cheaper I roll my eyes. X is always a massive subset on security, durability with a massive uncounted overhead in other areas (waste of time).