Skip to main content

Database / Relational

CCC Relational Database Management System Capabilities

Version: DEV

IDTitleDescriptionThreat Mappings
CCC.RDMS.CP01SQL SupportThe service always accepts and executes queries written in the SQL language for data definition, manipulation, and retrieval.1
CCC.RDMS.CP02DB Engine Option - MySQLThe service can provision a managed relational database running the MySQL engine.1
CCC.RDMS.CP03DB Engine Option - PostgreSQLThe service can provision a managed relational database running the PostgreSQL engine.1
CCC.RDMS.CP05DB Engine Option - SQL ServerThe service can provision a managed relational database running the Microsoft SQL Server engine.1
CCC.RDMS.CP07DB Self Managed CredentialsThe service always supports database users authenticated by a username and password that the user creates and manages.4
CCC.RDMS.CP08Support for IPv4The service always exposes an IPv4 endpoint through which clients connect to the database.1
CCC.RDMS.CP09Support for IPv6The service may be configured to expose an IPv6 endpoint through which clients connect to the database.1
CCC.RDMS.CP12Managed Connection PoolingThe service may be configured to place a managed connection pool in front of the database so that client connections are reused and bounded.1
CCC.RDMS.CP15Horizontal ScalingThe service may be configured to create read replicas of the primary database, in the same or another region, to serve read traffic.1
CCC.RDMS.CP16FailoverThe service may be configured to maintain a standby database that is automatically promoted when the primary cannot be reached.1
CCC.RDMS.CP17Cloud Identity AuthenticationThe service may be configured to authenticate database users with short-lived tokens issued to the cloud provider's identity principals, so that no long-lived database password needs to be stored or rotated.2
CCC.RDMS.CP18Automated Engine PatchingThe service may be configured to apply database engine security patches and minor version upgrades during a maintenance window, to limit exposure to known engine vulnerabilities; on some providers this is always on.1

Imports

IDRemarks
CCC.Core.CP01Encryption in Transit Enabled by Default
CCC.Core.CP02Encryption at Rest Enabled by Default
CCC.Core.CP03Access Log Publication
CCC.Core.CP06Access Control
CCC.Core.CP07Event Publication
CCC.Core.CP08Data Replication
CCC.Core.CP09Metrics Publication
CCC.Core.CP10Log Publication
CCC.Core.CP11Backup
CCC.Core.CP12Recovery
CCC.Core.CP14API Access
CCC.Core.CP17Alerting
CCC.Core.CP19Child Resource Scaling
CCC.Core.CP20Resource Tagging
CCC.Core.CP22Location Lock-In
CCC.Core.CP23Network Access Rules
CCC.Core.CP24Core Processing Units
CCC.Core.CP25Random Access Memory Allocation
CCC.Core.CP26Persistent Storage
CCC.Core.CP28Command-line Interface
CCC.Core.CP30Passive Ingestion
CCC.Core.CP31Elastic Scaling
CCC.Core.CP32Deletion Protection
CCC.Core.CP33Public Access Restriction
CCC.Core.CP35Customer-Managed Encryption Keys