Data Security Center:Authorize DSC to access a self-managed database hosted on an ECS instance

Limits

Prerequisites

DSC is purchased and authorized to access cloud services. For more information, see Purchase DSC and Authorize DSC to access Alibaba Cloud resources.

Step 1: Authorize DSC to access a self-managed database

Log on to the database that you want to manage and run the following command to authorize DSC to access the database as a specific database user. In the following example, a self-managed MySQL database hosted on an ECS instance is used. For databases of other types hosted on ECS instances, run the relevant authorization commands.

GRANT SELECT ON *.* TO 'Username'@'CIDR block' IDENTIFIED BY 'Password';

Command description:

• Username: the username of the self-managed database.

• CIDR block: The CIDR block varies based the region. For example, the CIDR blocks of the China (Qingdao) region are 100.104.69.0/26,100.104.48.128/26. For more information about CIDR blocks, see CIDR blocks.

• Password: the password of the self-managed database.

Step 2: Authorize DSC to access an ECS instance

1. Log on to the DSC console.

2. In the left-side navigation pane, choose Asset Center > Authorization Management.

3. On the Authorization Management tab, click Asset Authorization Management.

4. In the left-side pane of the Asset Authorization Management panel, click ECS self-built database.

5. Click Add Asset. In the Add Asset dialog box, configure the parameters and click OK or Add and Configure Permissions.

   Parameter	Description
   Database Engine Type	Select the database engine and version from the drop-down list.
   Server Type	The default value is ECS Instance and cannot be changed.
   Region	Select the region where the database is deployed. The region must be the same as the region of the IP address in Step 1: Authorize DSC to access a self-managed database.
   Instance ID	Select the ECS instance where the database is deployed from the drop-down list.
   Port	Enter the port that is used to connect to the database.
   Permission Configuration Item	You must select at least one permission configuration item: Data Identification: Select this item if you want to use DSC to detect sensitive data in the database and perform classification or de-identification on the sensitive data. Audit: Select this item if you want to use DSC to audit database activities. For more information about the audit configuration, see Configure the audit mode.

6. In the Configure Permissions dialog box, click Add Account, enter a database name, select the permissions of the database user, enter the database username and password, and then click OK.

7. Return to the Authorization Management page to view the connection status of the self-managed database.

CIDR blocks

References

• Database overview