Checks whether a PolarDB cluster uses the virtual private cloud (VPC) network type or is deployed in a specified VPC.
Scenario
Deploy PolarDB clusters in a VPC to achieve network isolation and protect your cloud environment.
Risk level
Default risk level: medium.
You can change the risk level when you apply this rule.
Compliance evaluation logic
- If vpcIds is not specified, the configuration is compliant when the PolarDB cluster is deployed in any VPC. If vpcIds is specified, the configuration is compliant only when the cluster is deployed in one of the specified VPCs.
- If vpcIds is not specified and the PolarDB cluster uses the classic network, the configuration is non-compliant. If vpcIds is specified but the cluster is not deployed in any of the specified VPCs, the configuration is also non-compliant. To correct the configuration, see Non-compliance remediation.
Rule details
| Item | Description |
| Rule name | polardb-dbcluster-in-vpc |
| Rule ID | polardb-dbcluster-in-vpc |
| Tag | PolarDB and VPC |
| Automatic remediation | Not supported |
| Trigger type | Configuration change |
| Supported resource type | PolarDB cluster |
| Input parameter | vpcIds
Note Separate multiple parameter values with commas (,). |
Non-compliance remediation
Change the network type of the PolarDB cluster to VPC. For more information, see Custom Purchase.