Database / Relational
Capabilities Version: v2026.11 (latest) DEV Download file from GitHub
ID Title Description Threat Mappings CCC.RDMS.CP01 SQL Support The service always accepts and executes queries written in the SQL language for data definition, manipulation, and retrieval. 1 CCC.RDMS.CP02 DB Engine Option - MySQL The service can provision a managed relational database running the MySQL engine. 1 CCC.RDMS.CP03 DB Engine Option - PostgreSQL The service can provision a managed relational database running the PostgreSQL engine. 1 CCC.RDMS.CP05 DB Engine Option - SQL Server The service can provision a managed relational database running the Microsoft SQL Server engine. 1 CCC.RDMS.CP07 DB Self Managed Credentials The service always supports database users authenticated by a username and password that the user creates and manages. 4 CCC.RDMS.CP08 Support for IPv4 The service always exposes an IPv4 endpoint through which clients connect to the database. 1 CCC.RDMS.CP09 Support for IPv6 The service may be configured to expose an IPv6 endpoint through which clients connect to the database. 1 CCC.RDMS.CP12 Managed Connection Pooling The service may be configured to place a managed connection pool in front of the database so that client connections are reused and bounded. 1 CCC.RDMS.CP15 Horizontal Scaling The service may be configured to create read replicas of the primary database, in the same or another region, to serve read traffic. 1 CCC.RDMS.CP16 Failover The service may be configured to maintain a standby database that is automatically promoted when the primary cannot be reached. 1 CCC.RDMS.CP17 Cloud Identity Authentication The service may be configured to authenticate database users with short-lived tokens issued to the cloud provider's identity principals, so that no long-lived database password needs to be stored or rotated. 2 CCC.RDMS.CP18 Automated Engine Patching The service may be configured to apply database engine security patches and minor version upgrades during a maintenance window, to limit exposure to known engine vulnerabilities; on some providers this is always on. 1