Purchasing DBSS

Scenario

DBSS can be purchased in yearly/monthly mode. Security audit provides the starter, basic, professional, and advanced editions. Security O&M provides the enhanced edition. Security encryption provides the enhanced edition. You can purchase DBSS edition as needed. For details, see Purchasing DBSS.

Notes and Constraints

• DBSS cannot be used across regions and the database must be in the same region as the instance you purchased.
• Ensure the VPC of the database audit instance is the same as that of the node (application side or database side) where you plan to install the database audit agent. Otherwise, the instance will be unable to connect to the agent or perform audit. For details about how to create a shared VPC, see Shared VPC.
• For details about how to choose the node, see How Do I Determine Where to Install an Agent?

Impact on the System

DBSS works in out-of-path mode, which neither affects user services nor conflicts with the local audit tools.

Prerequisites

Check whether the instance account has the required permissions. For details, see DBSS Permission Management.

Ensure that the DBSS System Administrator, VPC Administrator, ECS Administrator, and DBSS Administrator policies have been configured for the account used for purchasing instances.

• VPC Administrator: Users with this set of permissions can perform all execution permission for VPC. It is a project-level role, which must be assigned in the same project.
• DBSS Administrator: Users with this set of permissions can perform any operation on menu items on pages My Account, Billing Center, and Resource Center. It is a project-level role, which must be assigned in the same project.
• ECS Administrator: Users with this set of permissions can perform any operations on an ECS. It is a project-level role, which must be assigned in the same project.

Purchasing DBSS

1. Log in to the DBSS console.
2. Click in the upper left corner on the displayed page and select a region.
3. In the upper right corner, click Buy DBSS.
4. Configure Basic Settings and Edition Configuration. For details about the version specifications, see Editions.
   • If Edition is set to Security Audit, you can select Database Audit Starter Edition, Database Audit Basic Edition, Database Audit Professional Edition, or Database Audit Advanced Edition.
   • If Edition is set to Security O&M, you can select Database Audit O&M Enhanced Edition.
   • If Edition is set to Security Encryption, you can select Database Audit Encryption Enhanced Edition.
   

   If Edition is set to Security O&M or Security Encryption, you are advised to use the recommended series. If the recommended series cannot meet your requirements, click Custom and select a deployed series for database O&M or encryption.

   • New: The system automatically allocates instance types. This mode is recommended for users new to the database O&M or database encryption service.
   • Capacity expansion: You can select a deployment series. This mode is recommended for experienced users of database O&M or database encryption. Deployed series1 and Deployed series2 are available. For details about the differences between the series, see Functions. Data cannot be smoothly migrated between series 1 and series 2. To avoid service disruptions, select the same database O&M or database encryption series as your existing instances for capacity expansion.

5. Set database audit parameters described in Table 1.
   Figure 1 Network configuration
   
   Figure 2 Advanced configuration
   

   Table 1 Database audit parameters

   Parameter	Description
   VPC	You can select an existing VPC, or click View VPC to create one on the VPC console. NOTE: Select the VPC of the node (application or database side) where you plan to install the agent. For more information, see How Do I Determine Where to Install an Agent? To change the VPC of a DBSS instance, unsubscribe from it and purchase a new one. For more information about VPC, see Virtual Private Cloud User Guide.
   Security Group	You can select an existing security group in the region or create a security group on the VPC console. Once a security group is selected for an instance, the instance is protected by the access rules of this security group. For more information about security groups, see Virtual Private Cloud User Guide.
   Subnet	You can select a subnet configured in the VPC or create a subnet on the VPC console.
   Name	Instance name.
   Remarks	You can add instance remarks.
   Enterprise Project	This parameter is provided for enterprise users. An enterprise project groups cloud resources, so you can manage resources and members by project. The default project is default. Select an enterprise project from the drop-down list. For more information about enterprise project, see Enterprise Management User Guide.
   Tag	(Optional) Identifier of the database audit instance. Adding tags helps you better identify and manage your database instances. A maximum of 50 tags for each instance If you have configured tag policies for DBSS, you need to add tags to your DBSS instances based on the tag policies. If a tag does not comply with the policies, DBSS instance may fail to be created. Contact your organization administrator to learn more about tag policies.

6. If Edition is set to Security O&M or Security Encryption, you need to configure Login Information. Enter Password and Confirm Password.
7. Set Required Duration. See Figure 3.
   Figure 3 Setting the required duration
   
   After you select Auto-renew, the system automatically renews the instance upon expiry if your account balance is sufficient. You can continue to use the instance. Table 2 describes the auto-renewal period.

   Table 2 Auto-renewal period description

   Required Duration	Auto-renewal Period
   1/2/3/4/5/6/7/8/9 months	1 month
   1/2/3 years	1 year

8. Confirm the configuration and click Next.

   For any doubt about the pricing, click Pricing details to understand more.

9. On the Details page, read the Database Security Service Statement, select I have read and agree to the Database Security Service Statement, and click Submit.
10. On the displayed page, select a payment method.
11. After you pay for your order, you can view the creation status of your instances.

Follow-Up Procedure

• If the Status of the instance is Running, you have successfully purchased the database audit instance.
• If the instance status is Creation failed, you will be automatically refunded. You can click More in the Operation column and view details in the Failure Details dialog box.