I have an microservice architecture running on AWS ECS cluster using Postgres and Node and there is this requirement that we need to somehow allow our client to lock our database with a secret key such that we the developer's should not be able to access the DB directly without their consent.
This sounds a bit weird but the project involves sensitive data and there are strict compliance requirements which need to be met and hence we need to allow them in someway by doing something or the other by means of which when my app runs it fetches the credentials from a service and uses them to access the db while i should not be able to do that.
I looked at couple of AWS services which might help me store secret credentials in a safe place such as the Parameter Store and encrypt the data using KMS. But i have no idea that is this thing possible at all using AWS services or by any other means.
Any help or pointers as to how should one go about implementing this idea ?