title: How secure is using RDS Postgres with Heroku?
body: <p>I'm using Amazon RDS Postgres with my Heroku instance because it is more cost effective. But how secure is it? Can't somebody just log into my database? Can't they just snoop traffic? Is it any less secure than if I were to use the standard Postgres with Heroku? Is encryption at rest good enough?</p>
  
  <p>FYI: There is no way to force use SSL with postgres on RDS</p>
  
  <p>I'm using the following scheme to connect:</p>
  
  <pre><code>postgres://randomusername:longpassword@url:myport/databasename?sslrootcert=path_to_cert&amp;sslmode=requ
  </code></pre>