Our database is installed within a private network and cannot be accessed from outside.
When accessing for operational purposes, we connect through VPN and use Amazon GuardDuty as our IDS.
Additionally, since we use AWS Fargate as our infrastructure, host defense is handled by AWS.