This solution includes diverse security modules to build a comprehensive database security system covering multiple dimensions including permission control, account management, link security, storage security, backup and restoration management, and disaster recovery.

Data Security Management: Unified authorization management, basic permission isolation, and R&D workflow security management jointly eliminate common data security risks.
Account Security Management: Resource Access Management (RAM) prevents account sharing and encryption key leakage in multi-account coordination scenes. Permission Control restricts accounts to avoid unauthorized access. Data masking prevents sensitive data leakage during data transmission.
Link Security: Anti-DDoS protection is provided to safeguard public IP addresses. SSL encryption helps defend against man-in-the-middle (MITM) attacks. Enhanced whitelist protects your database instances against SQL injections.
Storage Security: Transparent Data Encryption (TDE) encrypts data before it is written to the disk and decrypts it for reading without file size changes. Bring Your Own Key (BYOK) allows you to generate your own encryption keys to protect highly sensitive data assets.
Disaster Recovery: The multiple availability zone deployment provides cross-IDC disaster recovery capabilities, and the Global Database Network (GDN) of PolarDB features geo-redundancy and geo-disaster recovery for cross-region scenarios. The "table recycling" function recovers wrong data deletion to lower risks.
Data Backup and Restoration: You can customize backup rules for data across regions and accounts, or from a single table, and leverage the flashback feature to restore data to a specified time in seconds.