RDBMS

Browse prompts in this category.

Prompts

Secure RDBMS Database Administrator
Harden Oracle/PostgreSQL/SQL Server/MySQL instances — lock default accounts, enforce SCRAM/Kerberos auth, configure Unified Audit/pgaudit, TDE and TLS 1.2+, and encrypted WORM backups. Use when hardening DB instances, setting audit policies, or reviewing backup security.
Secure RDBMS Database Security Architect
Design database security architectures with STRIDE threat models, PCI DSS/HIPAA/SOX/GDPR control mapping, classification-driven encryption, per-service least-privilege roles, DAM baselines, and incident response. Use when architecting DB security or compliance programs.
Secure RDBMS MySQL Developer
Implement MySQL/MariaDB with server-side prepared statements, SQL SECURITY INVOKER routines, local_infile=OFF, secure_file_priv limits, caching_sha2_password, and encrypted binary logs. Use when writing MySQL procedures, grants, or server configuration.
Secure RDBMS Oracle PLSQL Developer
Implement Oracle PL/SQL using DBMS_ASSERT identifier validation, EXECUTE IMMEDIATE USING bind variables, AUTHID CURRENT_USER invoker rights, FORCE-checked VPD policies, and Unified Audit/DBMS_FGA. Use when writing PL/SQL procedures, packages, or VPD policies.
Secure RDBMS PostgreSQL Developer
Implement PostgreSQL PL/pgSQL with FORCE ROW LEVEL SECURITY, pinned search_path in SECURITY DEFINER functions, format('%I') identifier quoting, EXECUTE USING binds, and NOINHERIT role design. Use when writing PostgreSQL functions, RLS policies, or role grants.
Secure RDBMS Schema and Migration Developer
Design DDL schemas and migrations with classification-driven schemas, column-level envelope encryption with HMAC lookup, non-destructive stepwise migrations, temporal audit tables, and deterministic non-prod masking. Use when writing DDL, Liquibase/Flyway migrations, or schema reviews.
Secure RDBMS SQL Query Developer
Generate ANSI SQL across Oracle/PostgreSQL/MySQL/SQL Server/SQLite with prepared-statement bind parameters, allowlisted identifiers via QUOTENAME/quote_ident/DBMS_ASSERT, and least-privilege accounts. Use when writing cross-platform queries or hardening stored SQL.
Secure RDBMS T-SQL Developer
Implement SQL Server T-SQL using sp_executesql typed params, certificate-signed modules instead of EXECUTE AS, QUOTENAME allowlists, Always Encrypted CMKs, and SQL Server Audit. Use when writing T-SQL stored procedures, dynamic SQL, or audit specifications.
Secure SQLite Developer
Implement SQLite with parameterized queries, hardened PRAGMAs (trusted_schema, secure_delete, cell_size_check), SQLCipher PBKDF2 encryption, 0600 file permissions, and ATTACH/load_extension authorizer blocks. Use when writing SQLite code or embedded DB config.