This topic describes how to purchase a subscription instance of Data Security Center (DSC).
Before you begin
Before you purchase Data Security Center, confirm that your data assets are in a supported region and of a supported type. You should also understand the features of the edition that you want to purchase. For more information, see:
Notes
To use the Free Edition, see Activate the Free Edition of Data Security Center.
Procedure
Go to the Data Security Center purchase page and log on to your Alibaba Cloud account.
Configure the parameters as described in the following table.
Parameter
Description
Edition
Select the DSC edition that you want to purchase. You can select one of the following editions:
Enterprise Edition: Suitable for medium-sized enterprises. This edition includes all DSC security features. The following default specifications are provided:
Data Discovery: 3 TB of storage and 30,000 database tables.
Data Audit: 3 TB of OSS data and 3 database instances.
Detection and Response: 3 TB of OSS data and 3 database instances.
Enhanced Image Recognition: 10,000 images.
Image Masking: 10,000 images.
Column Encryption: 10 columns.
Premium Edition: Suitable for small-sized businesses. This edition provides basic security protection and supports only limited specifications for Data Discovery and Data Audit by default. To use features such as Image Masking and Detection and Response, you must purchase them as value-added services or upgrade to the Enterprise or Ultimate Edition.
The following default specifications are provided:
Data Discovery: 1 TB of storage and 10,000 database tables.
Data Audit: 1 TB of OSS data and 1 database instance.
Column Encryption: 1 column.
DBAudit (Classified Protection Compliance Edition): This edition provides database audit capabilities for customers who need to meet classified protection compliance requirements. To increase the audit capacity, you can purchase value-added services.
The following default specifications are provided:
Data Audit: 1 TB of OSS data and 3 database instances.
Value-added Services Only: Purchase individual security features such as Data Detection and Response, Data Audit, Data Discovery, Enhanced Image Recognition, Image Masking, Column Encryption, and Log Storage.
If you enable the Detection and Response feature, you receive a one-month free trial of the Data Discovery and Data Audit features. After the trial expires, you must upgrade your DSC instance or purchase sufficient resources to continue using these features.
After you purchase a paid edition, you receive a free monthly quota of 500 database instances and 500 PB of storage for data protection. This quota cannot be extended.
Detection And Response
Value-added service. Specifies whether to enable the threat detection and response feature for OSS, RDS, and PolarDB. This feature is enabled by default.
Detection And Response - OSS Protected Data Size
Value-added service: After you enable Detection and Response, specify the amount of OSS data to protect. Valid values: 1 TB to 9,999,999,999 TB.
After you enable the Detection And Response service, you receive a free monthly quota of 1 TB for OSS data protection.
Detection And Response - Number Of Database Instances
Value-added service: After you enable Detection and Response, you can specify the number of database instances to protect. Valid values: 1 to 999,999,999.
After you enable the Detection And Response service, you receive a free monthly quota of one database instance.
Data Audit
Value-added service. Specifies whether to enable the Data Audit service.
Data Audit - OSS Protected Data Size
Value-added service. After you enable Data Audit, you can specify the total capacity of the OSS buckets to audit. Valid values: 1 TB to 9,999,999,999 TB.
After you enable the Data Audit service, you receive 50 GB of audit log storage by default each month for each TB of OSS storage capacity. If this quota is exceeded, you can purchase more log storage capacity in the Log Storage section.
Data Audit - Number Of Database Instances
Value-added service: After you enable Data Audit, specify the number of database instances to audit. Valid values: 1 to 9,999,999,999.
After you enable the Data Audit service, 200 GB of audit log storage is provided by default each month for each database instance. If this quota is exceeded, purchase more log storage capacity in the Log Storage section.
Data Discovery
Value-added service. Specifies whether to enable the Data Discovery service.
Data Discovery - Number Of Database Tables
Value-added service. After you enable Data Discovery, you can specify the number of database tables to scan. The value is specified in units of 10,000 tables. Valid values: 1 to 9,999,999,999.
NoteIf the same table is scanned three times, it is counted as three tables against your quota.
Data Discovery - Storage Scan Size
Value-added service. After you enable Data Discovery, specify the total capacity of the OSS buckets and SLS projects to scan. The capacity is measured in TB, and the value must be an integer from 1 to 9,999,999,999.
NoteIf a 1 TB bucket is scanned three times, 3 TB is deducted from your storage scan size quota.
Enhanced Image Recognition
Value-added service. Specifies whether to enable the enhanced image recognition feature.
When you enable the Image Desensitization feature and purchase an Image Desensitization Quota, you receive an equal amount of Enhanced Image Recognition Quota. When an image desensitization task runs, image recognition is performed first, and the number of recognized images is then deducted from your Enhanced Image Recognition Quota. If your free Enhanced Image Recognition Quota is insufficient, you can enable the Enhanced Image Recognition feature and purchase an additional Enhanced Image Recognition Quota.
Enhanced Image Recognition Quota
Value-added service. The estimated number of images to scan and recognize per month. The unit is 10,000 images.
Image Masking
Value-added service. Specifies whether to enable the image masking feature.
Number Of Images To Mask
Value-added service. The estimated number of images to mask per month. The unit is 10,000 images.
NoteWhen you run an image masking task, the number of successfully masked images counts against your Number Of Images To Mask quota.
If the same image is masked three times, it is counted as three images against your quota.
Column Encryption
Value-added service. Specifies whether to enable the column encryption service.
Number Of Columns To Encrypt
Value-added service. The estimated number of columns to encrypt per month. The purchase step size is 5.
Log Storage
Value-added service specifies whether to enable the log storage feature to store operation logs of assets that have Data Audit enabled. This feature is Enabled by default.
Data Security Center provides a default monthly log storage space of 200 GB for each database instance and 50 GB for each TB of OSS protected data. For more information, see Free resource specifications.
If the default log storage capacity is insufficient for your business needs, enable Log Storage and purchase additional Log Storage Capacity. If the volume of business logs exceeds your storage capacity, new logs from protected assets will not be stored.
Log Storage Capacity
Value-added service. After you enable Log Storage, specify a log storage capacity between 1 TB and 500 TB.
WarningSelect a sufficient Log Storage Capacity. Logs may be lost if the database access log volume increases suddenly or if the purchased storage capacity is insufficient.
Subscription Duration
Select a subscription duration.
Click Buy Now and complete the payment.