Database Password Encryption

[gurn]

Hi

I have a set of pipelines that are accessing a snowflake database. The user credentials I store in the job right now are username + password which is 40 character length randomly generated strings.

I have a meta user for Talend configured to only have read access to a meta schema where I'm storing some context info which is initialised when the job is executed.

I could use the ENCRYPT_RAW function in snowflake to create an encryption string of the random string which could be decrypted at runtime via a tDBRow and tJavaRow but as we are running Talend client side rather than in the cloud I think it's safer to build some level of client-side encryption if possible via Talend, encrypting and decrypting in Talend.

Would be great to get advice here from the community and also suggestions on how best to do this via Talend as it seems the tDataEncrypt isn't available in the open studio?

Thanks

Dave

[Anonymous · Accepted solution]

@Dave Gurney​ , the tDataEncrypt is only available in Talend enterprise subscription products Talend Data Management Platform, Talend Big Data Platform, Talend Real Time Big Data Platform, Talend Data Services Platform, and in Talend Data Fabric. Here is a KB article about the usage of tDataEncrypt and tDataDecrypt components. With open studio, you can follow the suggestions in this page.

Regards

Shong