RDS security configurations-Alibaba Gov Cloud-阿里云帮助中心

ApsaraDB RDS (Relational Database Service) provides a variety of security hardening features to protect your RDS databases. These features include attack prevention and access control.

ApsaraDB RDS provides a variety of security hardening features to protect your data. These features include the following:

Network: IP address whitelists, VPC networks, and SSL (Secure Sockets Layer).
Storage: TDE (Transparent Data Encryption), automatic backups, and manual backups. Backup data is stored in OSS. OSS uses a multi-replica feature to ensure high availability.
Disaster recovery: Multi-zone disaster recovery (multi-zone instances) and geo-disaster recovery (dual-center).
Passwords: You can set strong passwords for your RDS database. A strong password must be at least 12 characters long and include numbers, uppercase letters, lowercase letters, and special symbols. For more information about setting passwords, see Create accounts and databases.

The following features protect your database services:

Attack prevention: Provides traffic scrubbing and blackhole routing to defend against DDoS attacks.
Access control: Secures database access using account authentication and whitelist settings.
Network isolation: Uses VPCs to achieve a higher degree of network access control.
Data encryption: Provides transparent data encryption to ensure data security.