Service Terms for Database Security Service

Service Terms for Database Security Service

Thank you for using HUAWEI CLOUD Database Security Service (DBSS). Please review the contents of this HUAWEI CLOUD Database Security Service Usage Statement (hereinafter referred to as "this Statement") carefully before agreeing to its contents. If you have any questions about the terms included here, please contact HUAWEI CLOUD customer service. Selecting the Agree option on HUAWEI CLOUD, or in some other way formally agreeing to the contents here, means that you have read, understood, and accepted all the terms and conditions of this Statement, and reached an agreement with HUAWEI CLOUD. This Statement takes effect immediately upon acceptance. If you do not agree to this Statement, or to any of its terms, do not accept it by selecting the Agree option on HUAWEI CLOUD or in any other way.

Auditing: To provide database audit functions, agents installed on your servers communicate with the analytics platform on the cloud. The analytics platform runs on a Dedicated Cloud (DeC) server instance allocated to you by HUAWEI CLOUD. You understand and agree to authorize HUAWEI CLOUD to use the agents to capture data from the database access traffic on your servers, and forward the data to the analytics platform for security audit and analysis. Data collected for audit purposes typically includes personal data, such as ID and banking details. The agent forwards all the data to the analytics platform, where the data will be kept until the system frees up disk space. If you enable the backup feature, collected data will also be stored in your OBS buckets until you delete it. Before collecting any personal data, you shall notify the data subjects and obtain their consent. To protect privacy, you can set data masking rules on the database audit console. You can log in to the database audit console, and enable or disable related database audit functions, such as defining the scope and types of data to be audited, and protecting audit records. A disabled function cannot be used.

Access permissions: Database audit analysis results are displayed on the HUAWEI CLOUD console. You understand and agree to authorize the HUAWEI CLOUD console to access the analytical platform to obtain and display audit data and analysis results.

Secure operations: You understand and agree that the agents can be installed on Windows and Linux OSs. If a data leakage occurs because your OS is not genuine or is infected by a Trojan, you understand and agree to bear the consequences and ensure that HUAWEI CLOUD will not suffer any losses.

Masking: Database audit provides the data masking function. On the database audit console, you can create protected databases, create data discovery tasks, and set masking rules. If any data you want to mask is printed in logs or displayed on the console because you did not specify such data in your masking rules, did not configure appropriate regular expressions, or only used default DBSS regular expressions that did not match such data, you understand and agree to bear the consequences and ensure that HUAWEI CLOUD will not suffer any losses.

Backup: Database audit provides an audit data backup function. You understand and agree to authorize HUAWEI CLOUD to create an OBS bucket for you when you use this function, and to upload backup data to this OBS bucket. You will be charged for any fees incurred by the OBS bucket. You can enable or disable the backup function on the database audit console. A disabled function cannot be used.

Data deletion: If you stop using this service, HUAWEI CLOUD will call Resource Operate Service (ROS) to delete your instances and data stored in DBSS, but will not delete the data backed up to the OBS bucket. You can delete the backup data from the OBS console.

Alarm: Database audit can send alarm notifications via email or SMS. You understand and agree to authorize HUAWEI CLOUD to store the email addresses and phone numbers you provided and send alarm notifications to the email addresses and phone numbers when alarm conditions are met. You can enable or disable the alarm function on the database audit console. A disabled function cannot be used.

 

Last Updated: May 2020