[Info-ingres] Installation Password vs DBMS Authentication

[Steve]

Hi folks

Is using an Installation Password considered less secure, versus say DBMS authentication, when connecting to a remote Ingres installation?

To give some context, I am thinking in terms of a cloud environment where Ingres installations can be spun up and down willy nilly. By spun up, I mean where Ingres is installed and started on a new server instance with the press of a button (well, that’s the theory).

I thought DBMS authentication maybe more secure for connecting to a remote instance - presumably each user is prompted for their password when connecting. However, this would require the newly created Ingres installation to have the user information in order to authenticate the user. 

Also, this ignores the fact that the cloud provider will have their own layer of security.

Any thoughts (apart from don’t over think it)?

Thanks
Steve