Billing overview

Billing details of DSC

The fees of DSC consist of basic feature fees and value-added feature fees. The following figure shows the fees.

Enterprise Edition

Value-added Plan

Billable items

DSC provides different editions that support different security capabilities and different billable items. You can select an edition based on your business requirements. For more information about the features of each edition, see Differences between the features of different editions.

You are not charged for the free edition of DSC. For more information, see DSC Free Edition. If you have used the free edition, the data of the free edition is not deleted after you purchase a paid edition.

Free resource specifications

• Enterprise Edition

  Billable item	Free specification
  Log storage capacity	DSC Enterprise Edition is purchased. DSC provides 200 GB of log storage per month for each database instance in the purchased database instance quota. DSC provides 50 GB of log storage each month for each TB of Storage Protection Capacity that you purchased. The data detection and response feature in the Value-added Module section is enabled. DSC provides 50 GB of log storage capacity per month free of charge for each TB of purchased OSS protection capacity. The Data Detection and Response - OSS Protection Capacity parameter specifies the OSS protection capacity that you purchased. DSC provides 200 GB of log storage per month for each purchased database instance. The Data Detection and Response - Number of Database Instances parameter specifies the number of database instances you purchased.
  Data Detection and Response - OSS Protection Capacity	If you enable Data Detection and Response in the Value-added Module section, 1 TB of Object Storage Service (OSS) protection capacity is provided each month free of charge.
  Data Detection and Response - Number of Database Instances	If you enable Data Detection and Response in the Value-added Module section, one database instance is provided each month free of charge.
  Columns	DSC provides a free quota of one field.

• Value-added Plan

  Billable item	Free specification
  Database instance quota	After you purchase value-added features, DSC imposes no limits on the database instance quota and the storage protection capacity. The storage protection capacity includes OSS authorization quota and Simple Log Service authorization quota.
  Storage protection capacity
  Data detection and response - OSS protection capacity	If you enable the data detection and response feature, 1 TB of OSS protection capacity is provided each month free of charge.
  Data Detection and Response - Number of Database Instances	If you enable Data Detection and Response, one database instance is provided each month free of charge.
  Log storage capacity	The data detection and response feature is enabled. DSC provides 50 GB of log storage per month free of charge for each TB of purchased OSS protection capacity. The Data Detection and Response - OSS Protection Capacity parameter specifies the OSS protection capacity that you purchased. DSC provides 200 GB of log storage per month for each purchased database instance. The Data Detection and Response - Number of Database Instances parameter specifies the number of database instances you purchased. If you activate the free edition and purchase the value-added plan edition, DSC provides 5 GB of log storage per month free of charge. If you do not activate the free edition and purchase the value-added plan edition, you cannot use the free 5 GB of log storage per month.
  Columns	DSC provides a free quota of one field.

If the free resource specifications do not meet your business requirements, you can upgrade your edition or purchase additional specifications in the value-added module section.

Billing rules

• Enterprise Edition

  Feature	Billable item	Billing rule
  Basic feature	Asset authorization Data auditing Data identification	You are charged for basic features based on the amount of data that you want to protect. After you complete asset authorization, you can use the basic features of DSC. Take note of the following items: The database instance quota is deducted based on the number of authorized database instances. The storage protection capacity is deducted based on the sizes of authorized OSS buckets. The storage protection capacity is deducted based on 50% of the sizes of authorized Simple Log Service projects. For example, if the sizes of authorized Simple Log Service projects are 10 GB, 5 GB of storage protection capacity is deducted. ApsaraDB for Redis does not consume the database instance quota. ApsaraDB for Redis supports only security baseline checks. For more information about the authorization quota, see Authorization quota management.
  Value-added feature	Data detection and response	You are charged based on the sizes of the OSS buckets and the number of database instances for which the data detection and response feature is enabled. You are charged a one-time fee for enabling the data detection and response feature based on the subscription duration that you specify when you purchase the feature. After you authorize the data detection and response feature to access OSS assets, the free OSS authorization quota is deducted first based on the sizes of objects in the authorized OSS buckets. If the free OSS authorization quota is exhausted, the OSS protection capacity that you purchased is deducted. The Data Detection and Response - OSS Protection Capacity parameter specifies the OSS protection capacity that you purchased. After you authorize the data detection and response feature to access database instances, the free database instance quota is deducted first based on the number authorized database instances. If the free database instance quota is exhausted, the number of purchased database instances is deducted. The Data Detection and Response - Number of Database Instances parameter specifies the number of database instances that you purchased.
  	Log storage capacity	When you use the data auditing feature for database instances and OSS assets that are protected by the basic features and the data detection and response feature, the collected logs for auditing are stored in DSC and the free log storage capacity is preferentially used. If the free storage capacity is exhausted, the log storage capacity that you purchased is deducted.
  	Column encryption	You are charged for enabling the column encryption feature and the column quota. You are charged a one-time fee for enabling the column encryption feature based on the subscription duration that you specify when you purchase the feature. The column quota is deducted based on the total number of encrypted fields in configured tables.

• Value-added Plan

  If you select Value-Added Plan, you can use only the purchased features. When you use the purchased features, the resource specifications that you purchased are deducted.

  Billable item	Billing rule
  Data detection and response	You are charged based on the sizes of the OSS buckets and the number of database instances for which the data detection and response feature is enabled. You are charged a one-time fee for enabling the data detection and response feature based on the subscription duration that you specify when you purchase the feature. After you authorize the data detection and response feature to access OSS assets, the free OSS authorization quota is deducted first based on the sizes of objects in the authorized OSS buckets. If the free OSS authorization quota is exhausted, the OSS protection capacity that you purchased is deducted. The Data Detection and Response - OSS Protection Capacity parameter specifies the OSS protection capacity that you purchased. After you authorize the data detection and response feature to access database instances, the free database instance quota is deducted first based on the number authorized database instances. If the free database instance quota is exhausted, the number of purchased database instances is deducted. The Data Detection and Response - Number of Database Instances parameter specifies the number of database instances that you purchased.
  Log management	When you use the data auditing feature for database instances and OSS assets that are protected by the data detection and response feature, the auditing logs are stored in DSC and the free log storage capacity is preferentially used. If the free storage capacity is exhausted, the log storage capacity that you purchased is deducted.
  Column encryption	You are charged for enabling the column encryption feature and the column quota. You are charged a one-time fee for enabling the column encryption feature based on the subscription duration that you specify when you purchase the feature. The column quota is deducted based on the total number of encrypted fields in configured tables.

Billing formula

(Fees for purchased basic features + Value-added features ) × Subscription duration

Pricing of billable items

Billable items of basic features

Billable items of value-added features

Billable items for related cloud services

After you connect a data asset to DSC, the fees for reading data in the data asset and storing audit logs of the data asset are deducted from the balance of the account to which the data asset belongs. The bills are included in the bills of the relevant cloud service. For more information, see Additional fees for database assets connected to DSC.