(Recommended) Connecting to Cluster Instances Through DAS

Scenarios

Data Admin Service (DAS) enables you to manage databases on a web-based console. It supports SQL execution, advanced database management, and intelligent O&M, simplifying database management and improving both efficiency and data security. You can connect to and manage DB instances using DAS. DDS enables remote host login by default. However, using DAS is recommended for a more secure and convenient experience.

This section describes how to buy a cluster instance and how to connect to this instance through DAS.

Required Permissions

To use this function, IAM users must be granted the DAS FullAccess permission. For details, see Create User Groups and Assign Permissions.

You can create a custom policy to specify the database types for which you have permissions.

1. Log in to the IAM console and choose Permissions > Policies/Roles.
   Figure 1 Creating a custom policy
   
2. Specify a policy name, policy view, content, and other information.
   Figure 2 Configuring a custom policy
   

   Table 1 Custom policy parameters

   Parameter	Description
   Policy Name	Enter a policy name.
   Policy View	Select JSON.
   Policy Content	Configure the following policy content: { "Version": "1.1", "Statement": [ { "Action": [ "das:*:*", "dds:instance:listAll" ], "Effect": "Allow" } ] } Alternatively, click Select Existing Policy/Role, select DAS FullAccess as a template, and retain only the DB type information. In this example, retain only dds:instance:listAll.
   Description	Enter a policy description.
   Scope	Retain the default setting (project-level service).

3. Click OK. You can then view the created custom policy on the Permissions page.
   Figure 3 Viewing the custom policy
   
4. Create a user group.
   Figure 4 Creating a user group
   
5. Associate the user group with the custom policy created in 3.
   Figure 5 Associating the user group with the custom policy
   
   Figure 6 Selecting the created custom policy
   
6. Click the user group name. In the displayed Manage User dialog box, add the user.
   Figure 7 Adding users
   

Prerequisites

A DDS cluster instance has been created and is running properly.

Procedure

1. Log in to the management console.
2. Click in the upper left corner and select a region and a project.

   If you want compute and network resources dedicated to your exclusive use, enable a DeC and apply for DCC resources. After enabling a DeC, you can select the DeC region and project.

3. Click in the upper left corner of the page and choose Databases > Document Database Service.
4. On the Instances page, locate the target DB instance and click Log In in the Operation column.
   Figure 8 Logging in to DAS
   

   Alternatively, click the target DB instance on the Instances page. On the displayed Basic Information page, click Log In in the upper right corner of the page.

5. In the Instance Login dialog box, enter the correct information and click Log In to access and manage your database.
6. After the login is successful, you can perform operations such as creating a database, managing accounts, and managing databases.

   For details, see DDS Database Management.

FAQ

What Should I Do If I Can't Connect to My DDS Instance Through DAS?

Other Methods for Connecting to an Instance

Connecting to a Cluster Instance over a Private Network

Connecting to a Cluster Instance over a Public Network

Connecting to a Cluster Instance Using Program Code