Will OS user have access to all the customer data?

asurajpai
Participant V

Hi,

1) Please let us know if su/root/apigee user would have access to all the customer data. The root user ideally can have VM access but does it have access to the customer data (data generated by the software).

2) If this is the case, then please let know if there is any way to restrict the root user from accessing the customer data (generated by API Runtime).

BR, Suraj

0 2 206
2 REPLIES 2

Not applicable

Our compliance team is the best to answer this question. I dropped them a mail on this. You should get reply soon...

Hi @asurajpai,

1) No - a short answer: all the datastores can be password protected [cassandra, openldap, postgres] and the procedures to do that are all documented in the Private Cloud : Install and operations guide. Rest of the components are stateless, no data stored

So even the root user or any user can ssh to the instance - they cant get access to data unless they also have those creds. Again, who gets access to what will be dictated, usually, by you compliance and governance process.

Hope this helps

Thanks,