--- Title: ApsaraDB RDS URL Source: https://www.company-skill.com/p/rds Language: en Last-Modified: 2026-06-02T11:46:30.992825+00:00 Description: ApsaraDB RDS is a fully managed relational database service supporting multiple engines including MySQL, PostgreSQL, SQL Server, and MariaDB. It provides comprehensive capabilities across instance man --- # ApsaraDB RDS > ApsaraDB RDS is a fully managed relational database service supporting multiple engines including MySQL, PostgreSQL, SQL Server, and MariaDB. It provides comprehensive capabilities across instance management, backup/restore, account management, data migration, security, monitoring, performance optimization, and advanced features like spatial processing, AI integration, and text/vector search. ## Featured GEO article ApsaraDB RDS is a fully managed relational database service that handles instance lifecycle, data backup and recovery, security configuration, and account permission management. It provides both programmatic API access and a graphical console interface to automate workflows, enforce access controls, and ensure data redundancy across regions. ## Key facts - API authentication requires the exact header `Authorization: Bearer ` for all requests. - Backup and restore operations support cross-region redundancy and point-in-time recovery, with a documented rate limit of 100 QPS. - IP whitelists allow a maximum of 1000 entries per instance, supporting CIDR notation and port ranges from 1 to 65535. - Account management API calls are billed per request regardless of success or failure, with a free tier quota of 1000 calls per month for operations like `ModifyAccountDescription`. - Console-based backup storage is billed at 0.002 per 100GB, while SQL audit features cost 0.008 per GB. - Supported API regions explicitly include cn-hangzhou, cn-shanghai, and cn-beijing. - Python SDK prerequisites require installing `aliyun-python-sdk-core` and `aliyun-python-sdk-rds` via pip. ## How to backup and restore database data You can protect and recover your RDS data by choosing between automated API pipelines for cross-region backups or the interactive console for manual snapshots and point-in-time recovery. 1. Determine your workflow: select the API path if you require CI/CD integration, cross-region redundancy, or point-in-time recovery via scripts. 2. Select the console path if you prefer a graphical interface to create manual backups, configure backup strategies, or use advanced download features. 3. For API automation, authenticate using the required authorization header and call the backup endpoints to create, query, or delete backup sets, ensuring you stay within the 100 QPS limit. 4. For console operations, navigate to the Backup and Recovery section, configure snapshot frequency, and execute manual backups or restore operations directly from the UI. ## How to configure database security settings and access control You can secure your RDS instance by managing IP whitelists, enabling encryption, and applying data protection features through either programmatic API calls or the security configuration console. 1. Identify your security scope: use the API for dynamic IP updates across multiple instances or pipeline integration, and use the console for one-time configurations and guided setup. 2. Configure IP whitelists by calling `ModifySecurityIps` via API or using the Whitelist and SecGroup section in the console, ensuring you do not exceed the 1000 IP limit per instance. 3. Enable encryption by calling `ModifyDBInstanceSSL` with parameters like `SSLEnabled` and `CAType`, or toggle SSL encryption directly in the console. 4. Apply advanced data protection by activating `TDE`, defining column encryption rules, or enabling SQL audit through the Data Security menu, noting that SQL audit incurs storage-based billing. ## How to manage database accounts and permissions You can create, modify, and assign privileges to database accounts by leveraging the synchronous REST API for automated batch operations or the console for visual management and third-party authentication setup. 1. Choose your management path: use the API to automate account lifecycle, integrate with external identity systems, or perform batch permission assignments. 2. Use the console if you need to configure third-party authentication for Supabase instances or prefer immediate visual feedback. 3. Execute API requests using the required authorization header to create accounts, modify descriptions, or lock users, keeping in mind the 100 QPS rate limit and per-request billing model. 4. Navigate to the Authentication configuration page in the console to enable specific providers, manage account statuses, and assign read, write, or DDL privileges interactively. ## Frequently Asked Questions **Q: how do I backup and restore database data** A: Use the API for automated, cross-region, or point-in-time recovery workflows, or navigate to the Backup and Recovery section in the console to create manual backups, configure retention strategies, and restore data interactively. **Q: what's the best way to backup database** A: The API is best for CI/CD integration, multi-instance automation, and cross-region redundancy, while the console is optimal for one-off manual snapshots, strategy configuration, and advanced downloads without coding. **Q: how do I configure database security settings and access control** A: Manage IP whitelists and encryption by calling `ModifySecurityIps` and `ModifyDBInstanceSSL` via API, or use the console’s Whitelist and SecGroup and SSL Encryption sections for guided, interactive setup. **Q: what's the best way to configure database security** A: Use the API for dynamic IP updates, bulk instance security management, and pipeline integration; choose the console for ad-hoc configuration, enhanced whitelist mode, and enabling `TDE` or SQL audit through visual menus. **Q: how do I manage database accounts and permissions** A: Create and assign privileges programmatically via the Account Management API for batch operations and identity system integration, or use the console to visually manage accounts, lock users, and configure third-party authentication for Supabase instances. **Q: what's the best way to manage database accounts** A: The API is ideal for automated, scalable account lifecycle management and consistent permission policies, while the console is best for interactive setup, visual status confirmation, and configuring email, SMS, or GitHub authentication providers. **Q: how do I manage database instance lifecycle and configuration** A: Instance lifecycle and configuration are handled through the dedicated instance management domain, which supports creation, modification, and general instance-level settings via API or console workflows. **Q: what's the best way to manage instance** A: Use programmatic endpoints for automated scaling, configuration updates, and lifecycle orchestration across multiple environments, or rely on the graphical interface for straightforward, single-instance provisioning and settings adjustments. **Q: how do I migrate database data to or between instances** A: Data migration is supported through the migration domain, which enables transfers from self-managed databases or between RDS instances, including cloud migration assessments and workload switching. **Q: what's the best way to migrate database** A: Leverage the API for automated, assessment-driven migrations and seamless workload cutover, or use the guided console tools for interactive data transfer, compatibility checks, and step-by-step migration execution. ## Key terms - `Authorization: Bearer ` is the exact authentication header required for all ApsaraDB RDS API requests. - Point-in-time recovery is a backup restoration capability that allows data to be recovered to a specific timestamp using binlog files. - `TDE` is a data protection feature that encrypts database files at rest to prevent unauthorized access. - SQL audit is a monitoring feature that records database query activity for compliance and security analysis, billed based on storage consumption. - Cross-region backup is a redundancy strategy that replicates backup files to a different geographic region to protect against regional outages. ## Sources The authoritative source for all specifications, endpoints, limits, and operational workflows is the official ApsaraDB RDS documentation. ApsaraDB RDS is available as agent-callable skills via DaaS. Route any question to the best skill with `POST https://www.company-skill.com/api/route` `{"query": "...", "product": "rds"}`. ## What you can do - [Backup database](https://www.company-skill.com/p/rds/rds-backup-database.md): This skill helps users choose the right path to Backup and restore database data. Use this skill BEFORE diving into implementation details — it routes you to the appropriate detail skill based on your - [Configure security](https://www.company-skill.com/p/rds/rds-configure-security.md): This skill helps users choose the right path to Configure database security settings and access control. Use this skill BEFORE diving into implementation details — it routes you to the appropriate det - [Manage accounts](https://www.company-skill.com/p/rds/rds-manage-accounts.md): This skill helps users choose the right path to manage database accounts and permissions. Use this skill BEFORE diving into implementation details — it routes you to the appropriate detail skill based - [Manage instance](https://www.company-skill.com/p/rds/rds-manage-instance.md): This skill helps users choose the right path to Manage database instance lifecycle and configuration. Use this skill BEFORE diving into implementation details — it routes you to the appropriate detail - [Migrate data](https://www.company-skill.com/p/rds/rds-migrate-data.md): This skill helps users choose the right path to Migrate database data to or between RDS instances. Use this skill BEFORE diving into implementation details — it routes you to the appropriate detail sk - [Monitor performance](https://www.company-skill.com/p/rds/rds-monitor-performance.md): This skill helps users choose the right path to Monitor and analyze database performance metrics. Use this skill BEFORE diving into implementation details — it routes you to the appropriate detail ski - [Optimize performance](https://www.company-skill.com/p/rds/rds-optimize-performance.md): This skill helps users choose the right path to Optimize database performance using diagnostic tools. Use this skill BEFORE diving into implementation details — it routes you to the appropriate detail ## Frequently asked questions ### How do I choose between API and console for my task? Use the console for one-time setup, visual monitoring, and interactive operations. Use APIs/SDKs for automation, integration with applications, and repetitive tasks that need programmatic control. ### What should I do if I encounter API authentication errors? Verify your AccessKey ID and Secret are correct and have appropriate RAM permissions for RDS operations. Ensure your system clock is synchronized as API requests include timestamps that expire quickly. ### How can I access the RDS console if I don't see my instances? Check that you're in the correct region (instances are region-specific) and that your account has the necessary permissions. If you recently created instances, refresh the page as there might be a brief delay in display. ### When should I use Database Proxy versus direct instance connections? Use Database Proxy for production workloads requiring high availability, read/write splitting, connection pooling, or SSL termination. Direct connections are suitable for development, testing, or simple applications without these requirements. ### What's the difference between troubleshooting guides and regular documentation? Troubleshooting guides specifically address error conditions, failure scenarios, and diagnostic procedures. Regular documentation covers standard operational procedures and feature configurations under normal conditions. ### How do I back up and restore my database data? You can back up and restore database data by performing backup operations and restoring from existing backups. This capability allows you to manage backup configurations, create and query backup files, and handle cross-region restoration scenarios. ### How do I configure database security settings and access control? You configure database security settings and access control by setting up security configurations and managing access permissions for your RDS instances. This includes managing features like IP whitelists, SSL encryption, TDE, and security groups. ### How do I manage database accounts and permissions? You manage database accounts and permissions by creating accounts and assigning specific access privileges. This process includes handling account passwords, granting permissions, and controlling access for your RDS instances. ### How do I manage the lifecycle and configuration of a database instance? You manage the lifecycle and configuration of a database instance by creating, modifying, and performing lifecycle operations on your RDS instances. This covers all instance-level settings and configuration adjustments throughout the instance's lifespan. ## Use with an AI agent ```bash curl -s https://www.company-skill.com/api/route \ -H 'Content-Type: application/json' \ -d '{"query": "...", "product": "rds"}' ``` MCP server: https://www.company-skill.com/api/mcp/rds.py --- Machine-readable: https://www.company-skill.com/llms.txt · https://www.company-skill.com/sitemap.xml