Data Management:ApsaraDB Data Ingestion

Category

Parameter

Description

Data source

-

By default, Alibaba Cloud-MySQL is selected. You can select a different database type.

Basic information

Database type

Select the type of the database instance.

Instance region

Select the region where the database instance resides.

Other primary accounts

This parameter appears if you select Cross-Alibaba Cloud account instances. Select the Alibaba Cloud account to which the database instance belongs.

Entry method

Select the method to add the database instance. You can add an instance by its Instance ID or Connection String Address.

Instance ID or Connection String Address

Enter the Instance ID or Connection String Address.

Access mode

Select whether to enable security hosting for the instance and the method to log on to the database. When security hosting is enabled, users do not need to directly handle credentials. This allows for fine-grained permission control.

• Security Hosting - Automatic (Recommended): DMS automatically enables security hosting for the instance and creates a database account and password to log on to DMS.

  Note

  • This parameter appears only when you add an ApsaraDB RDS instance.

  • You can view the account that DMS automatically creates in the ApsaraDB RDS console. Do not modify or delete the account. This can affect how DMS functions.

  • Accounts that DMS automatically creates in ApsaraDB RDS instances do not have the permissions to create databases or database accounts. This does not apply to ApsaraDB RDS for PostgreSQL instances.

• Security Hosting - Manual: DMS automatically enables security hosting for the instance. You must manually enter an existing database account and password.

• Security Hosting - KMS: DMS automatically enables security hosting for the instance. You must manually select an RDS credential created in Key Management Service (KMS) to log on to the database.

  Note

  This parameter appears only when you add an ApsaraDB RDS instance.

• Disable Security Hosting (Not Recommended): If you disable security hosting, you must frequently use a database account and password to log on. This may affect normal use of the features.

Value-added feature package

Select a feature package as needed.

• Security Collaboration or Stable Change (select one): Security Collaboration includes all features of Stable Change and provides DevOps capabilities. It lets you customize development and approval flows. Stable Change provides solutions for more stable database operations, such as lock-free schema evolution and SQL review.

  Note

  If you do not select Security Collaboration or Stable Change, the instance is managed in Flexible Management mode by default.

• Sensitive Data Protection: This feature lets you manage and mask sensitive data. Enable this feature as needed. For more information, see Enable sensitive data protection.

Security rules

This parameter appears if you select Security Collaboration for the feature package.

You can select the default security rule or a custom security rule to implement fine-grained control over the database.

Classification and grading template

The Classification and grading template parameter appears only when you enable Sensitive Data Protection.

You can attach a classification and grading template to an instance. This helps detect if fields in the instance's databases and tables match the template's detection rules. If a field matches a rule, it is tagged with a classification and a sensitivity level to protect highly sensitive fields.

Advanced information

Environment type

Select the type of database environment.

Instance name

Clear the Sync instance name checkbox to customize the display name of the instance in DMS.

Lock-free Schema Change

Select whether to enable the lock-free schema evolution feature. You can choose one of two methods for executing changes: Execute with DMS lock-free change and Prioritize native lock-free, switch to DMS on failure.

Enable SSL

By default, DMS disables SSL connections.

To connect to the database using SSL, manually enable SSL connections in DMS and ensure that SSL is enabled for the database.

Secure Sockets Layer (SSL) encrypts network connections at the transport layer. This improves the security and integrity of communication data, but it increases the network connection response time.

Instance DBA

Select a DBA role for subsequent processes such as permission requests.

Query timeout (s)

Set a security policy. When the specified time is reached, a query statement executing in an SQL window is interrupted to protect the database.

Export timeout (s)

Set a security policy. When the specified time is reached, an export statement executing in an SQL window is interrupted to protect the database.