Data Security Center (DSC) uses the subscription billing method. This topic describes the billable items, billing formula, and billing details of DSC.
Billing method
DSC supports the subscription billing method. Subscription is a billing method that allows you to pay for resources before you use the resources. This billing method allows you to reserve resources at discounted rates and reduce costs. The subscription billing method is suitable for the following business scenarios:
The usage period of resources can be estimated.
The resource usage does not frequently fluctuate.
Resources are required for long-term use.
The billing cycle of a subscription resource is the subscription duration that you specify when you purchase the resource. The time is in UTC+8. The billing cycle begins at the time when the subscription resource is purchased or renewed and ends at 00:00:00 on the day after the expiration date. The start time and end time are accurate to the second.
Billing details of DSC
The fees of DSC consist of basic feature fees and value-added feature fees. The following figure shows the details.
Billable items
Free resource specifications
Basic features
By default, DSC Enterprise provides 200 GB of log storage each month for each database instance and 50 GB of log storage for each TB of Object Storage Service (OSS) storage.
Value-added features
If you enable the data detection and response feature, 1 TB of OSS protection capacity is provided each month free of charge.
If you enable the data detection and response feature, 50 GB of log storage is provided each month free of charge for each TB of purchased OSS protection capacity.
If the log storage capacity is insufficient, DSC no longer stores the audit logs of protected assets. You can enable the value-added log storage feature to purchase additional log storage volume. For more information about log storage management, see Log storage management.
Billable items for basic features
DSC provides basic data security features, such as sensitive data identification, data security baseline check, data auditing, and data masking. The features supported by each DSC edition vary.
Billing rules
You are charged for basic features based on the amount of data that you want to protect. To use the basic features of DSC, you must authorize DSC to access relevant assets. After the authorization is complete, the database instance quota is deducted based on the number of authorized database instances. The OSS protection capacity is deducted based on the size of objects in the authorized OSS buckets.
ApsaraDB for Redis does not consume the authorization quota. Only security baseline checks are supported. For more information about the authorization quota, see Authorization quota management.
When you use the data auditing feature, the collected logs are stored in DSC, which consumes the log storage capacity of DSC.
Pricing
Billable item | Specifications | Enterprise |
Database instance quota | 1 to 20 instances | USD 400 per instance-month |
21 to 50 instances | USD 300 per instance-month | |
51 to 100 instances | USD 250 per instance-month | |
More than 100 instances | USD 200 per instance-month | |
OSS protection capacity (in 1,000 GB increments) | 1,000 GB to 10,000 GB | USD 0.2 per GB-month |
11,000 GB to 100,000 GB | USD 0.15 per GB-month | |
100,001 GB to 500,000 GB | USD 0.12 per GB-month | |
More than 500,000 GB | USD 0.1 per GB-month |
Billable items for value-added features
You can purchase and enable the data detection and response feature and the log storage feature. The OSS assets that the data detection and response feature is authorized to access are not associated with the OSS assets that DSC is authorized to access. You must separately authorize the data detection and response feature to access OSS assets. The data detection and response feature is billed as a value-added feature.
Billing rules
The fees for value-added features are calculated by using the following formula: USD 666 per month for enabling the data detection and response feature + OSS protection fee + log storage fee.
You are charged for enabling the data detection and response feature once based on the subscription duration that you specify when you purchase the feature.
You are charged for the data detection and response feature based on the OSS protection capacity. After you authorize the data detection and response feature to access OSS assets, the OSS protection capacity is deducted based on the size of objects in the authorized OSS buckets.
When you use the data auditing feature to protect authorized databases and OSS assets, the free storage capacity is used first. If the free storage capacity is exhausted, the log storage capacity that you purchased is used.
Pricing
Billable item | Specifications | Price |
Data detection and response | Enable the data detection and response feature | USD 666 per month |
OSS protection capacity (X) | 0 TB < X <= 5 TB | USD 200 per TB-month |
5 TB < X <= 10 TB | USD 150 per TB-month | |
10TB < X <= 50 TB | USD 100 per TB-month | |
50 TB < X <= 100 TB | USD 60 per TB-month | |
100TB < X <= 500TB | USD 30 per TB-month | |
500TB < X <= 9999999999TB | USD 200 per TB-month | |
Log storage | 1 TB to 500 TB | USD 80 per TB-month |
Billable items for related cloud services
When DSC identifies sensitive data in OSS and MaxCompute, DSC reads the data in OSS and MaxCompute. You are charged for the operations, such as creating scan tasks, manually running scan tasks, or performing data masking, that are performed in the DSC console. If cloud services use the pay-as-you-go billing method, the fees are included in the bills of the cloud services based on the number of access requests. The following table describes the details.
Cloud service | Billable item | Billing rule | Example |
OSS | GET requests (GetRequest) | To identify an OSS object, DSC sends two GET requests. For more information about billing rules of OSS, see OSS pricing. You are charged based on the billing method that you use. For example, if you use the pay-as-you-go billing method, the fees are included in your pay-as-you-go orders in OSS. | The following example is only for reference. The actual prices on the pricing page shall prevail. In this example, a pay-as-you-go Standard OSS bucket is used in the China (Hangzhou) region. The fee for GET requests is USD 0.001563 per 10,000 requests. For example, if you want to identify 10,000 objects that requires a total of 20,000 GET requests, you are charged for a total fee of 0.003126 USD in OSS. |
MaxCompute | Billing for standard SQL jobs | If MaxCompute uses the pay-as-you-go billing method, fees are generated. If MaxCompute uses the subscription billing method, no fees are generated. When DSC identifies sensitive data in MaxCompute, DSC reads only physical tables and the initial segment of data from each table. MaxCompute charges fees only for reading data. For more information about the billing rules of MaxCompute, see Computing pricing. | The following example is only for reference. The actual prices on the pricing page shall prevail. Fee for a standard SQL job = Amount of input data in computing × SQL complexity × Unit price of a standard SQL job For example, if the amount of identified data or input data in computing is 10 GB, the SQL complexity is 1.5, and the unit price of a standard SQL job is USD0.0438 per GB, the fee is calculated by using the following formula: 10 × 1.5 × 0.0438 = USD 0.657. |
Billing formula
Edition | Billing formula |
Enterprise | (Database management fee + OSS management fee + Value-added feature fee) × Subscription duration |
Value-added feature | Value-added feature fee × Subscription duration |
Purchase DSC
To use DSC, you must activate DSC and purchase sufficient resource specifications. For more information, see Purchase DSC.
View bills
On the Bill Details page in the Expenses and Costs console, you can view the bills and consumption details of DSC on the Billing Details and Usage Records tabs. For more information, see Billing details.
Upgrade
If the number of database instances, OSS protection capacity, or log storage capacity cannot meet your requirements, you can upgrade the specifications of DSC. For more information, see Specification change of subscription DSC.
DSC does not support downgrades.
Expiration and renewal
Before your DSC subscription expires, you must renew the subscription at the earliest opportunity to prevent the service suspension of DSC features such as sensitive data identification, security audit, and data masking. If you do not renew the subscription, you may experience data leaks, serious economic loss, and damage to brand reputation. For more information, see Renew a subscription instance.
Refunds
You can request a full refund for DSC within five days after you place an order. For more information, see Refund policy.