DaaS / Products / Secure Database Stack with Compliance Hardening

Secure Database Stack with Compliance Hardening

A developer provisions a compliant application stack by hardening the Alibaba Cloud Linux host to meet MLPS 2.0 baselines, then secures the backing RDS instance with IP whitelists and SSL encryption while creating least-privilege database accounts for the application.

Products involved

Scenario

A developer provisions a compliant application stack by hardening the Alibaba Cloud Linux host to meet MLPS 2.0 baselines, then secures the backing RDS instance with IP whitelists and SSL encryption while creating least-privilege database accounts for the application.

How the products combine

  1. rds · rds-configure-security — ApsaraDB RDS — Configure database security settings and access control
  2. See rds/rds-configure-security.

  3. rds · rds-manage-accounts — ApsaraDB RDS — Manage database accounts and permissions
  4. See rds/rds-manage-accounts.

  5. alinux · alinux-configure-compliance — Alibaba Cloud Linux — Configure system security policies and compliance baselines
  6. See alinux/alinux-configure-compliance.

Typical questions