检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
How Many Database Audit Instances Can I Purchase in the Same Region? Basic: supports up to three database instances. Professional: supports up to six database instances. Advanced: supports up to 30 database instances. Parent topic: Billing FAQs
In the navigation tree on the left, choose Audit Rules. In the Instance drop-down list, select the instance whose session information you want to view. Click the SQL Whitelist tab to view all SQL statement whitelists. Manage the whitelist.
will audit all instances in the database.
will audit all instances in the database.
Adding an SQL Whitelist You can add risky SQL statements to the whitelist. The SQL statements in the whitelist will be ignored during the audit. Constraints and Limitations The risky SQL statements can be added to the whitelist in data reports. Procedure Log in to the management console
Parent topic: Enabling and Using Database Audit (by Installing Agents)
How Do I Audit an RDS Database Accessed through Intranet (by Applications Off the Cloud)? If your PC accesses RDS through a private line, you can install the agent on a proxy your set up. Access from the proxy to the database can be audited.
Installing the Agent on CCE Cluster Nodes Importing Configurations to OBS Creating a ConfigMap Creating an Agent DaemonSet Workload Parent topic: Deploying the Database Audit Agent in a Container
Creating an Agent DaemonSet Workload After you create a ConfigMap, deploy the database audit agent and configure database information in the agent DaemonSet. Your database can then be connected to the database audit instance.
The agent will obtain database access traffic, upload traffic statistics to the audit system, receive audit system configuration commands, and report database monitoring data.
The configurations will be used to deploy the database audit agent in batches in the cloud storage of the agent container workload.
Creating a ConfigMap Create a ConfigMap to store the database information required by the agent container workload. The ConfigMap is used as a file in the workload. Procedure In the navigation pane, choose Configuration Center > ConfigMaps. Click Create ConfigMap. Configure parameters
Step 3: Download and Install the Agent Downloading an Agent Installing an Agent (Linux OS) Installing an Agent (Windows OS) Parent topic: Enabling and Using Database Audit (by Installing Agents)
Each agent has a unique ID, which is used as the key for connecting to a database audit instance. If you delete an agent and add it back, you need to download the agent again. Prerequisites The database audit instance is in the Running state.
Otherwise, the installation fails. 1 2 3 4 5 start agent starting audit agent audit agent started start success install dbss audit agent done! If the agent installation failed, ensure the OS version of the target node is supported and try again.
Table 1 Agent installation scenarios Scenario Node Audit Scope Precautions Self-built database on ECS/BMS Database All access records of applications that have accessed the database Install the agent on the database side.
You can use the DBSS instances to audit databases built on ECS. RDS DBSS can audit RDS instances. BMS DBSS can audit databases built on BMSs. CTS Cloud Trace Service (CTS) provides you with a history of DBSS operations.
Deployment Architecture Database audit is deployed in out-of-path pattern. It supports audit of RDS databases and databases built on ECS and BMS on Huawei Cloud.
Viewing Information About SQL Injection Detection This section describes how to view SQL injection detection information of a database audit instance. Prerequisites The database audit instance is in the Running state.
Viewing the System Monitoring This section describes how to view the system monitoring of database audit and learn about system resources and traffic usage. Prerequisites The database audit instance is in the Running state.
