Security control
|
Category |
Feature |
Description |
References |
|
Instance management |
Database configuration |
You can create or delete a database in Data Management (DMS), manage database owners, and configure the character set and collation of a database. |
N/A |
|
Database grouping |
You can add databases that are of the same engine type and deployed in the same environment to a database group. When you perform a data change or schema design on a database in a database group, DMS prompts you to confirm whether to perform the operation on all databases in the group. |
Database grouping | |
|
Instance configuration |
After you register a database instance with DMS, you can modify the basic and advanced information about the database instance. Basic information includes the database account and security rules. Advanced information includes the environment type, lock-free schema change feature, query timeout period, and export timeout period. |
||
|
Permission management |
Permission configuration |
You can grant permissions to users or revoke permissions from users, including the permissions to query, export, and change the data of instances and databases. |
Permission management |
|
Permission template |
You can add resources such as instances, databases, and tables that serve similar purposes, to a permission template and authorize multiple users at a time to manage the resources in the permission template. This improves ease-of-use and resolves the issue of duplicate authorization. |
Permission template | |
|
Permission policy |
You can use custom policies to manage permissions in a fine-grained manner. This effectively improves the resource security. |
Custom policy | |
|
Permissions |
You can view your permissions on resources such as instances, databases, and tables. You can also view the resources on which you have owner permissions, and the instances that you have permissions to access by using proxy endpoints. |
View owned permissions | |
|
Standard management |
Development specifications |
You can configure rules to standardize database development processes, such as rules on database design and risk identification. |
SQL correct |
|
Change specifications |
You can configure rules to standardize change operations on databases, such as rules on data changes by using SQL statements, risk identification, and risk approval. |
SQL correct | |
|
Data usage specifications |
You can configure rules to standardize data usage, such as rules on data export, data query, and SQL statement execution. |
N/A |
|
|
Data governance policy |
You can create custom security rules by using the domain-specific language (DSL) syntax. |
||
|
Functional specifications |
You can configure configuration items to manage the usage of all features in DMS. For example, you can specify whether a feature is visible to specific users and whether an operation is available to specific users. |
Config management | |
|
Data protection |
Sensitive data management |
DMS provides scan templates, detection models, and data masking algorithms to mask your sensitive data. This prevents sensitive data from being abused or leaked and protects your enterprise from financial losses or fines caused by data leakage. |
|
|
Data watermark |
You can embed watermarks in and extract watermarks from files. This helps you trace data during the distribution of data. Watermark embedding refers to embedding identification information into data or files. Watermark extraction refers to extracting unperceivable watermarks from files. |
Use data watermarks | |
|
Secure access proxy |
You can enable the secure access proxy feature for database instances for more comprehensive security. The secure access proxy feature generates proxy endpoints for database instances. You can use the proxy endpoints to access the database instances in a secure manner over the MySQL or HTTPS protocol. You can also use commands, an SQL client, or program code to access the database instances. |
||
|
Role and workflow management |
Approval Process management |
Approval processes are associated with security rules. You can configure different approval processes for different types of tickets. DMS provides default approval templates. You can also create custom approval templates and specify the approver of each approval node. |
Database development and management
|
Category |
Feature |
Description |
References |
|
Schema change |
Schema design |
You can design the schemas of tables in a database based on specific R&D standards. You can customize R&D processes for different lines of business based on your business requirements to ensure the consistency of schemas among multiple environments, such as the development environment, test environment, and production environment. |
Design schemas |
|
Schema synchronization |
DMS compares the schemas between specific tables in the source and destination databases, generates SQL statements for schema synchronization, and executes the SQL statements on the destination database. |
Synchronize schemas | |
|
Empty database initialization |
You can synchronize the schemas of the source database to an empty database that does not contain tables. This way, you can efficiently synchronize schemas between databases. You can use this feature to synchronize the schemas of databases that are deployed across multiple regions and units. |
Initialize empty databases | |
|
Table Consistency Repairing |
DMS compares the schemas between specific tables in the source and destination databases, identifies the schema differences, generates SQL statements to be executed on the destination database, and executes the SQL statements on the destination database. This ensures schema consistency between tables in different databases. |
Repair table inconsistency | |
|
Schema change |
You can execute SQL statements, such as CREATE TABLE, ALTER TABLE, and DROP TABLE, to change table schemas in databases. |
Normal data modify | |
|
Lock-free schema change |
You can use this feature to change schemas without the need to lock tables. This prevents your business from being affected by table locking that is caused by schema changes. This also prevents the synchronization latency from occurring between the primary and secondary databases when schemas are changed by using native online DDL operations. |
||
|
Data change |
Normal data modify |
You can change data in databases by executing SQL statements, such as INSERT, UPDATE, DELETE, TRUNCATE, and CREATE TABLE. This feature allows you to initialize data, delete historical data, fix issues, or run tests. |
Normal data modify |
|
Lock-free data change |
You can use this feature to split the data on which a single SQL statement is to be executed into multiple batches and execute the SQL statement on each batch. This ensures the execution performance and reduces the impact of the SQL statement execution on database performance or database storage. This feature allows you to change a large amount of data without locking tables. For example, you can use this feature to clear historical data or update all rows in a table. |
||
|
Development toolbox |
Data import |
You can import a large amount of data to a database by uploading an SQL script, a CSV file, or an Excel file. |
Data import |
|
Data export |
You can write SQL statements in DMS and export relevant data based on your business requirements. You can also export data and schemas of specific or all tables from a database. |
||
|
SQL review |
DMS reviews the submitted SQL statements and provides suggestions to optimize the statements. You can use this feature to prevent SQL statements that do not use indexes or do not conform to database development standards from being published to an online environment. This feature helps protect your databases against SQL injection attacks. |
SQL review | |
|
Data tracking |
This feature helps you track data operations that are performed in the SQL Console of a database in DMS within the retention period of binary logs and generate SQL statements for rolling back data changes. |
Data tracking | |
|
Logical database/table |
You can configure a logical database or logical table for one or more physical databases. This way, you can query and manage the complex and massive database shards and table partitions in the physical databases with ease. |
Data development and analysis
|
Category |
Feature |
Description |
References |
|
SQL Console |
SQL console |
You can execute various types of SQL statements on the SQL Console tab of the DMS console. On this tab, you can add, delete, modify, and query data in the specified database instance in a visualized manner. The SQL Console tab is designed for scenarios such as data query and data development. |
|
|
Data workstation |
Data integration |
The offline integration feature provides a low-code tool that you can use to develop data processing tasks. You can combine a variety of task nodes to create a data flow and configure periodic scheduling to process or synchronize data. |
N/A |
|
Task orchestration |
You can use the task orchestration feature to orchestrate task nodes and execute tasks based on a timed scheduling policy or an event scheduling policy that you specify. You can create a task flow that contains one or more task nodes to implement complex scheduling and improve data development efficiency. |
||
|
Logical data warehouse |
The logical data warehouse feature helps you integrate heterogeneous data sources from your enterprise to build unified virtual data warehouses with distributed physical resources for quick data analysis and access. These data warehouses can meet the requirements of different roles such as business staff, business intelligence (BI) analysts, and operations staff. |
N/A |
|
|
Data analysis |
The data analysis feature provides typical datasets and dashboards. You can use this feature to display data by using various visualization charts and components provided by the dashboards. You can use a table in a database or the query result of an SQL statement as a dataset and display the data in the dataset by using various charts and components, such as tables, line charts, and pie charts. You can also select specific charts and components and customize the layout to visualize your business data based on your business requirements. |
N/A |
|
|
Copilot |
Data Copilot is an intelligent data assistant that is developed based on the large language model (LLM) of Alibaba Cloud. Data Copilot is integrated with the data management and data usage capabilities of DMS to help developers, O&M staff, product staff, operations staff, analysts, and database administrators use and manage data in a more efficient and standardized manner. |
Data Copilot | |
|
OneOps |
Activate the Dify solution with one click |
Provides a solution to deploy a Dify application with one click, pre-integrated with capabilities like YaoChi Database, RAG, NL2SQL, and SQL querying, significantly lowering the barrier to developing Data Agent. |
- |
|
Data Agent for Analytics |
Enterprise-specific data intelligence for data analysis and mining tasks. Intelligent planning, autonomous execution of complex data processing, analysis, insight and report writing tasks. |
- |
Billing
|
Category |
Feature |
Description |
References |
|
Basic control capability |
Security collaboration |
The Security Collaboration mode supports all features that are included in Flexible Management and Stable Change modes and provides the DevOps feature to help you customize design specifications, R&D processes, and approval processes. |
|
|
Change capability |
Stable change |
The Stable Change mode supports all features that are included in Flexible Management mode and reduces limits on features such as data change. The Stable Change mode also provides solutions to allow databases to run more stably, such as lock-free changes and SQL review. |