Database Security

Protect, backup, and restore your data assets on the cloud with Alibaba Cloud database services.

Overview

Enterprises need databases with full-scale security capabilities to prevent data breaches and recover from data corruption. You can easily build a complete database security system based on Alibaba Cloud databases and services. ApsaraDB RDS for MySQL and PolarDB are highly compliant with international security standards and protect your data against threats, such as DDoS attacks and SQL injection. Data Management (DMS) and Data Backup (DBS) offer comprehensive and fine-grained data management, backup, and restoration capabilities to safeguard data in storage and transmission and guarantee highly available disaster recovery.

Solution Highlights

  • Out-of-the-Box Solution

    Start the ready-to-go services immediately through the fast and zero-impact deployments with no need to download, install, or modify anything that might affect your current IT system

  • High Cost-Effectiveness

    Reduce average cost to $2.16 per day with pay-as-you-go billing method and lower TCO with zero cost of machine procurement, physical capital maintenance, data center leases, and energy consumption

  • Unified Management Platform

    Use the unified graphical interface to customize fine-grained backup and restoration rules across data centers, regions, and accounts (or even in a hybrid cloud environment) to achieve comprehensive and highly available data backup

  • Powerful Enterprise-Level Features

    Fulfill enterprise security requirements, such as data recovery in seconds, row-level permission control, and comprehensive database auditing based on over ten years of best practices from Alibaba Group

Learn More about the Alibaba Cloud Database Security Solution

Contact Sales

How It Works

This solution includes diverse security modules to build a comprehensive database security system covering multiple dimensions including permission control, account management, link security, storage security, backup and restoration management, and disaster recovery.

Data Security Management: Unified authorization management, basic permission isolation, and R&D workflow security management jointly eliminate common data security risks.
Account Security Management: Resource Access Management (RAM) prevents account sharing and encryption key leakage in multi-account coordination scenes. Permission Control restricts accounts to avoid unauthorized access. Data masking prevents sensitive data leakage during data transmission.
Link Security: Anti-DDoS protection is provided to safeguard public IP addresses. SSL encryption helps defend against man-in-the-middle (MITM) attacks. Enhanced whitelist protects your database instances against SQL injections.
Storage Security: Transparent Data Encryption (TDE) encrypts data before it is written to the disk and decrypts it for reading without file size changes. Bring Your Own Key (BYOK) allows you to generate your own encryption keys to protect highly sensitive data assets.
Disaster Recovery: The multiple availability zone deployment provides cross-IDC disaster recovery capabilities, and the Global Database Network (GDN) of PolarDB features geo-redundancy and geo-disaster recovery for cross-region scenarios. The "table recycling" function recovers wrong data deletion to lower risks.
Data Backup and Restoration: You can customize backup rules for data across regions and accounts, or from a single table, and leverage the flashback feature to restore data to a specified time in seconds.

PolarDB

A cloud-native relational database compatible with MySQL, PostgreSQL, and Oracle

Learn More

ApsaraDB RDS for MySQL

A fully hosted online database service that supports MySQL 5.5, 5.6, 5.7, and 8.0

Learn More

Data Management

A database research and development service platform

Learn More

Database Backup

A reliable, cost-efficient backup service for continuous data protection

Learn More

Learn More about the Alibaba Cloud Database Security Solution

Contact Sales

4 Steps to Implement Database Security Solution

Purchase Cloud Databases

Purchase database products according to your technical stack and then create user and logical databases

Migrate Databases with DTS

Select tables to be migrated and complete the database migration. Then, switch business traffic

Manage Databases with DMS

Add database instances and configure security rules in DMS

Backup with DBS

Purchase a DBS instance and configure backup tasks for data recovery once data corruption occurs

Purchase Cloud Databases

Purchase database products according to your technical stack and then create user and logical databases

Migrate Databases with DTS

Select tables to be migrated and complete the database migration. Then, switch business traffic

Manage Databases with DMS

Add database instances and configure security rules in DMS

Backup with DBS

Purchase a DBS instance and configure backup tasks for data recovery once data corruption occurs

Special Offers

Free

PolarDB Instance

Only one PolarDB instance for free

  • PolarDB for MySQL: 2C8G General-Purpose
  • PolarDB for PostgreSQL: 2C8G Dedicated
  • PolarDB for Oracle: 2C8G Dedicated

Free

PolarDB Storage Package

For all instance types in the same region

  • 50 GB Storage

$0.01

Database Backup (DBS)

Only for first purchase of DBS

  • Backup from Anywhere
  • Encrypted Transmission
  • Low Cost for Database Migration
  • Rich External Functions

Free

Data Management (DMS)

For all Alibaba Cloud Databases

  • Easy Table Management
  • Visualized Table Restructuring
  • Data Import and Export
  • Data Query Across Databases

Learn More about the Alibaba Cloud Database Security Solution

Contact Sales

Customer Success Stories

"Vantage FX found that Alibaba Cloud offered the best, most suitable suite of purpose-built components that protect against all the common attack threats."

- Chris Nelson-Smith, Global Head of Risk, Vantage FX

Vantage FX is a CFD (Contract For Difference) broker specializing in Forex, Indices, Commodities and Global Share CFDs. Vantage FX found that Alibaba Cloud offered the best, most suitable suite of purpose-built components that protect against all the common attack threats, as well as provides various countermeasures against lesser-known attacks. And where Alibaba Cloud particularly stood out was the safeguarding of sensitive data and online transactions.

Alibaba Cloud's cutting- edge cloud technology as well as the comprehensive security solution, enabled TnG Digital to comply with the regulatory requirements for faster go to market product deliverables.

TnG Digital Sdn Bhd is a leading e-wallet provider in Malaysia, product of the joint venture between Touch ‘n Go Sdn Bhd and Ant Financial Group. TnG Digital leveraged Alibaba Cloud's Database Backup service (DBS) to reduce RPO to mere minutes, which reduced the pressure on DBAs and minimized business risk by simplifying the data restoration process. Alibaba Cloud PolarDB is also used as part of TnG Digital’s effort to cope with increasing traffic demands and ensure peak performance can be managed in any events.

Related Resources

Solution

Database Migration

This solution helps you leverage a rich set of utility tools and our database expert services to migrate to fully managed cloud databases.

Solution

Oracle Database Migration

This solution helps you migrate your legacy Oracle databases to Alibaba Cloud for improved scalability, reliability, robust security, high performance, and cloud-native features.

Whitepaper

The Eight Stages of Cloud-Based Data Security

This whitepaper explains how Alibaba Cloud can help you build a robust data security framework to safeguard your data assets.

Start with Alibaba Cloud Solutions

Learn and experience the power of Alibaba Cloud.

Contact Sales