When you connect data assets to Data Security Center (DSC), the account that owns each asset is charged for data reads and audit log storage. These charges apply to both main Alibaba Cloud accounts and member accounts managed by DSC, and the same billing logic applies to both.
The following table summarizes additional charges by asset type.
| Asset type | Data identification | Data audit |
|---|---|---|
| RDS | No additional fees. | No additional fees. If native log collection was enabled before April 17, 2024, see RDS and PolarDB legacy billing. |
| PolarDB | No additional fees. | No additional fees. If native log collection was enabled before April 17, 2024, see RDS and PolarDB legacy billing. |
| PolarDB for Xscale (PolarDB-X) | No additional fees. | The account that owns the asset is charged for log storage in Simple Log Service (SLS). Fees are collected by SLS. For more information, see Billing overview. |
| PolarDB-X 2.0 | No additional fees. | Security audit is not supported. No additional fees. |
| Redis | Data identification is not supported. No additional fees. | Security audit is not supported. No additional fees. |
| MongoDB | No additional fees. | After you enable auditing for a MongoDB asset in the DSC console, DSC automatically enables the audit log feature for the MongoDB instance. The account that owns the asset is charged for the MongoDB audit log feature. Fees are collected by MongoDB. For more information, see Enable the audit log feature. |
| OceanBase | No additional fees. | No additional fees. |
| Self-managed database | No additional fees. | Security audit is not supported. No additional fees. |
| OSS | DSC sends 1–2 GET requests per file for identification. The account that owns the asset is charged for these requests based on its billing method (for example, pay-as-you-go). For more information, see Billing overview. If you enable sensitive data tag synchronization in DSC, OSS charges PUT request fees for each tag operation. For more information, see Request fees. | Log data is stored in an SLS Logstore named oss-log-store under a project named oss-log-{UID}-{Region ID}, with a default retention of 7 days. No fees apply if data is stored for 7 days or fewer and does not exceed 900 GB. If data is stored for more than 7 days or exceeds 900 GB, the account that owns the asset is charged for storage. Fees are collected by SLS. For more information, see Billing. |
| Tablestore | Reading data from Tablestore incurs fees. The account that owns the asset is charged, and fees are collected by Tablestore. For more information, see Billing overview. | The account that owns the asset is charged for log storage in SLS. Log data is stored in a Logstore named tablestore-auditlog-store under a project named tablestore-log-{UID}-{Region ID}, with a default retention of 7 days. Fees are collected by SLS. For more information, see Billing overview. |
| MaxCompute | Reading data from a MaxCompute project incurs computing fees. If data is downloaded over the public network, data transmission fees also apply. The account that owns the asset is charged, and fees are collected by MaxCompute. For more information, see Billable items and billing methods. | No additional fees. |
| AnalyticDB for MySQL | No additional fees. | No additional fees. |
| AnalyticDB for PostgreSQL | Data identification is not supported. No additional fees. | Security audit is not supported. No additional fees. |
RDS and PolarDB legacy billing
This section applies only if native log collection was enabled for an RDS or PolarDB instance before April 17, 2024. For instances connected on or after that date, no additional fees apply.
Before April 17, 2024, enabling native log collection for RDS or PolarDB automatically enabled the SQL Explorer and Audit feature, which incurred the following charges on the account that owns the asset:
SQL Explorer and Audit fees: Billed and collected by RDS. For more information, see Billable items.
Log storage fees: The SQL Explorer and Audit feature creates an SLS Logstore to store raw logs, with a default retention of 3 days. The account that owns the asset is charged for this storage. Fees are billed and collected by SLS. For more information, see Billing overview.
To stop incurring these legacy fees, disable and then re-enable native log collection for the affected asset in the DSC console. After re-enabling, no additional charges apply.
PolarDB-X log storage details
After you enable native log collection for a PolarDB-X asset, DSC creates an SLS project named drds-audit-{Region ID}-{UID} with a Logstore named drds-audit-log. Data is stored for 45 days by default. The account that owns the asset is charged for storage in this Logstore. Fees are collected by SLS. For more information, see Billing overview.
References
DSC uses a subscription (prepaid) billing method. For more information, see Billing.