How do you guys manage IP address access to production / dev databases?
I am a software developer at a company with a team size of 7 people. The IP address of each individual in our organisation keeps on changing and it is really frustrating to go to DO / AWS security groups and keep on giving them access to database (removing the old IP and adding the new one). How do you guys manage this?
One way is to set up a ssh proxy server. This proxy server is the only IP that has access to the database (so only 1 IP). Each dev should be able to ssh to this box (via ssh keys).
Then in their database software, you can usually set up a proxy machine and they'll have access to the db on aws.
However if they are using this database for development, then you really should (if possible install the db it on their laptop. i.e. if its postgres/mysql). Generally you should restrict access to the production database (it's very easy for a develope to screw up the db).
Thanks a lot. Seems like a great suggestion.