Authorizing RDS Databases

Prerequisites

• DSC has been allowed to access the database assets. For details, see Allowing or Disallowing Access to Cloud Assets.
• You have subscribed to RDS, and assets are available in RDS. There are available IP addresses in the corresponding subnet.
• The Status of the RDS DB instance is Normal, and the number of security groups is 1.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, click and choose Security & Compliance > Data Security Center.
4. In the navigation tree on the left, choose Asset Management > Assets. On the displayed Assets page, choose Database > Unauthorized. The Unauthorized Database page is displayed, as shown in Figure 1.
   Figure 1 Unauthorized database assets
   

5. In the row containing the desired RDS DB instance, click Authorize in the Operation column.
   

   If you only need to authorize permissions for a single database in an RDS database instance, click on the left of instance. In the row containing the desired database, click Authorize in the Operation column.

6. In the displayed dialog box, set required parameters based on Table 1.
   Figure 2 Batch permission authorization for databases
   

   Table 1 Parameter description

   Parameter	Description
   Permission Settings	Read-only: It can only be used for sensitive data identification. CAUTION: After the RDS read-only permission is authorized, DSC creates an account dsc_readonly in RDS. After the password of the dsc_readonly account is reset in RDS, it will not be automatically synchronized to DSC. As a result, the sensitive data identification task fails. Therefore, do not reset the password of this account. If you have reset the password of dsc_readonly in RDS, delete the authorized RDS DB instance in DSC and re-authorize the instance. Read and Write: Sensitive data identification and data masking functions can be used.
   Asset List	If Read-only is selected for Permission Settings, you can change the names of the database assets to be authorized. If Read and Write is selected for Permission Settings, you can change the names of the database assets to be authorized. The usernames and passwords for accessing the databases must be configured.

7. Click OK. The authorized databases are displayed on the Authorized tab page.
   Figure 3 Connectivity test
   
   DSC will check the connectivity of the added database, and the connectivity status of the added database is Checking.

   • If DSC can access the added database, the connectivity status is Succeeded.
   • If the DSC cannot access the added database, the connectivity status Failed. View the failure cause and follow the instructions described in How Do I Troubleshoot the Failure in Connecting to the Added Database? to handle the problem.

Related Operations

• Allow or disallow access to database assets. For details, see Allowing or Disallowing Access to Cloud Assets.
• Delete database assets. For details, see Editing a Database.
• Edit database assets. For details, see Deleting a Database.