Identity Authentication and Access Control

Identity Authentication

When you access GaussDB(for MySQL), the system authenticates your identity using the password or IAM authentication.

• Password authentication

  To manage your instance, you need to use Data Admin Service (DAS) to log in to your instance. The login is successful only after your account and password are verified.

• IAM authentication

  You can use Identity and Access Management (IAM) to provide fine-grained control of GaussDB(for MySQL) permissions. IAM provides identity authentication, permissions management, and access control, helping you secure access to your Huawei Cloud resources. IAM users can use GaussDB(for MySQL) resources only after their accounts and passwords are verified. For details, see Step 2: Create IAM Users and Log In.

Access Control

• Permissions control

  If you need to assign different permissions to different employees in your enterprise to access your instance resources, IAM is a good choice. For details, see Permissions.

• VPC and subnet

  A VPC is a logically isolated, configurable, and manageable virtual network. It helps improve the security of cloud resources and simplifies network deployment. You can define security groups, virtual private networks (VPNs), IP address segments, and bandwidth for a VPC. This facilitates internal network configuration and management and allows you to change your network in a secure and convenient network manner.

  A subnet provides dedicated network resources that are logically isolated from other networks for security.

  For details, see Creating a VPC.

• Security group

  A security group is a logical group that provides access control policies for ECSs and GaussDB(for MySQL) instances that have the same security requirements and are mutually trusted in a VPC. To ensure database security and reliability, you need to configure security group rules to allow only specific IP addresses and ports to access GaussDB(for MySQL) instances.