Protection for Mission-Critical Operations

Scenario

GaussDB(DWS) protects mission-critical operations. If you want to perform a mission-critical operation on the management console, you must enter a credential for identity verification. You can perform the operation only after your identity is verified. For account security, it is a good practice to enable operation protection. The setting will take effect for both the account and users under the account.

Currently, the following operations are supported: scaling out a cluster, deleting a cluster, restarting a cluster, adding a CN, and deleting a CN.

Enabling Operation Protection

Operation protection is disabled by default. To enable it, perform the following steps:

1. Log in to the GaussDB(DWS) console.
2. Move the cursor to the username in the upper right corner of the page and click Security Settings from the drop-down list.
3. On the Security Settings page, click the Critical Operations tab. Click Enable in the Operation Protection area.
   Figure 1 Critical Operations
   

4. On the Operation Protection page, select Enable to enable operation protection.
   

   • When IAM users created using your account perform a critical operation, they will be prompted to choose a verification method from email, SMS, and virtual MFA device.
     • If a user is only associated with a mobile number, only SMS verification will be available.
     • If a user is only associated with an email address, only email verification will be available.
     • If a user is not associated with an email address, mobile number, or virtual MFA device, the user will need to associate an email address, mobile number, or virtual MFA device with their account before the user can perform any critical operations.
   • Change your phone number or email address for verification in My Account on the management console.

5. After operation protection is enabled, when you perform a mission-critical operation, the system will protect the operation.

   For example, when you delete a cluster, a verification dialog box for mission-critical operation protection is displayed. You need to select a mode to perform verification. This helps avoid risks and losses caused by misoperations.

Disabling Operation Protection

To disable operation protection, perform the following steps:

1. Log in to the GaussDB(DWS) console.
2. Move the cursor to the username in the upper right corner of the page and click Security Settings from the drop-down list.
3. On the Security Settings page, click the Critical Operations tab. Click Change in the Operation Protection area.
   Figure 2 Modifying operation protection settings
   

4. On the Operation Protection page, select Disable and click OK.