All Products
Search
Document Center

Cloud Config:BestPracticesForOceanBase

Last Updated:Sep 19, 2023

The BestPracticesForOceanBase compliance package continuously checks the compliance of your OceanBase resources. This topic describes the rules that are provided in the BestPracticesForOceanBase compliance package.

Rule name

Description

oceanbase-instance-enabled-sql-diagnosis

Checks whether the SQL diagnostics feature is enabled for each ApsaraDB for OceanBase cluster. If so, the evaluation result is Compliant.

oceanbase-instance-enabled-backup

Checks whether the database backup feature is enabled for each ApsaraDB for OceanBase cluster. If so, the evaluation result is Compliant.

oceanbase-tenant-enabled-encryption

Checks whether the transparent data encryption (TDE) feature is enabled for each ApsaraDB for OceanBase tenant. If so, the evaluation result is Compliant.

oceanbase-tenant-security-ip-check

Checks whether 0.0.0.0 is excluded from all IP address whitelists of each ApsaraDB for OceanBase tenant. If so, the evaluation result is Compliant.

oceanbase-instance-enabled-ssl

Checks whether the SSL encryption feature is enabled for each ApsaraDB for OceanBase cluster. If so, the evaluation result is Compliant.