I've been asked to expose the database of a web app publicly so that an external service can connect directly to the database (via username/password) to read information. This database is currently behind a firewall, with the web app connecting locally to it.
This immediately rings alarm bells in my head as being a security threat, butt I'd like to be able to summarize why this isn't a good idea. So what actually are the threats?
I would immediately think of the exposure to potential DDOSing of the database as well as any exploits and vulnerabilities that exist for the particular database server itself? Simple reconfiguration of the database server, exposing data? Not using SSL connections?