There are concerns that if our public facing web nodes are compromised, an attacker will gain access to all our data. It just so happens that data entered from outside users only needs to be ever accessed by internal users.
Does it offer any additional security, if we only give web nodes insert access, and only allow read/write access from internal facing nodes?
A related idea would be to use messaging to pass the write message from the web node to the internal node which would handle all DB modification.
My gut tells me these would both mitigate data leakage on a web node breach. Is there anything I'm overlooking?