Access Control Target

Available in VPC

In Access Control Target, you can create and manage server or DB targets to control user access. When a target is created, a relay session for the corresponding resource is established inside the proxy server to control user access and record access history.

Access Control Target interface

The Access Control Target interface includes the following components:

Server Target usage range settings

Server targets can be created up to a predefined usage range (quantity), so set the usage range first before creating any server targets. Since usage fees are charged based on the quantity set, you must calculate an appropriate quantity before setting it. To configure the settings:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Security > DB & Server Access Control > Access Control Target.
2. Click [Server Target usage range settings].
3. When the Server Target usage range settings popup appears, input the required information.
   • Server Target management name: Enter a name during initial setup.
   • Current Server Target usage range: The configured number of server targets.
   • Server Targets currently in use: The number of server targets currently in use.
   • Server Target usage: Whether to use server targets.
   • Server Target usage range definition: The number of server targets to configure.
4. Click [Configure].
5. When the pricing information popup appears, check the contents and click [OK].

Create a Server Target

You can register a server accessed remotely through SSH as an access control target. To create a server target:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Security > DB & Server Access Control > Access Control Target.
2. Click [Create Server Target].
   • If you have not set the server target usage range, a popup prompting you to do so will appear.
3. When the Server Target settings page appears, enter the information and click [Next].
   • Target name: Enter 3-30 characters using Korean characters, lowercase English letters, numbers, and hyphens (-).
   • Target type: Server (fixed value).
   • Resource server name: Select the Linux server in the VPC environment to register as an access control target.
   • Resource type: The operating system information of the resource server.
   • Access Port (SSH only): Enter a port number from 1 to 65535 for accessing the target resource.
     • Only SSH (default port: 22) is supported for task history logging.
     • If a different port is being used for security reasons, enter the set SSH port number.
   • Memo: Enter a description of the access control target of up to 1,000 bytes.
4. When the Logging and masking settings page appears, configure the logging scope and personal information masking, then click [Next].
   • Logging scope: Select the scope of access history to record.
     • Request: Log connection times, users, IP addresses, queries, and commands.
     • Request & Response: Log connection times, users, IP addresses, queries, commands, and results.
   • Personal information masking: Select whether to mask personal information when logging results.
     • Disable personal information masking: Do not mask personal information when logging results.
     • Enable personal information masking: Mask personal information when logging results.
       • Personal information masking targets: Select the items to mask.
       • Select user-defined masking: Select a custom pattern and click [Add].
5. Review the information about personal information masking and click [Next].
6. When Final confirmation appears, review the details and click [Create target].

Create a DB Target

You can register Cloud DB or a database installed directly on a standard server or configured from a server image (DBMS Server) as an access control target. You can create up to 30 targets; if you need to create more, you must make a separate request through a service inquiry. To create a DB target:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Security > DB & Server Access Control > Access Control Target.
2. Click [Create DB Target].
3. When the DB Target settings page appears, enter the information and click [Next].
   • Target name: Enter 3-30 characters using Korean characters, lowercase English letters, numbers, and hyphens (-).
   • Target type: Select Cloud DB or DBMS Server.
   • Resource server name: Select the server in the VPC environment to register as an access control target.
     • Cloud DB: Displays the Cloud DB list.
     • DBMS Server: Displays the server list.
   • Resource type: Information about the resource server.
     • Cloud DB: Filled in automatically.
     • DBMS Server: Select the DBMS type.
   • Access Port: The port number used to access the target resource.
     • Cloud DB: Filled in automatically.
     • DBMS Server: Enter a value from 1 to 65535.
   • Memo: Enter a description of the access control target of up to 1,000 bytes.
4. When the Logging and masking settings page appears, configure the logging scope and personal information masking, then click [Next].
   • Logging scope: Select the scope of access history to record.
     • Request: Log connection times, users, IP addresses, queries, and commands.
     • Request & Response: Log connection times, users, IP addresses, queries, commands, and results.
   • Personal information masking: Select whether to mask personal information when logging results.
     • Disable personal information masking: Do not mask personal information when logging results.
     • Enable personal information masking: Mask personal information when logging results.
       • Personal information masking targets: Select the items to mask.
       • Select user-defined masking: Select a custom pattern and click [Add].
5. Review the information about personal information masking and click [Next].
6. When Final confirmation appears, review the details and click [Create target].

View a Target

To view the details of a created Target:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Security > DB & Server Access Control > Access Control Target.
2. Check the details.
   • See Access Control Target interface.

Change a Target

You can change the access port number or memos of access control targets. To change a Target:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Security > DB & Server Access Control > Access Control Target.
2. Select the Target you want to change and click [Target settings].
3. When the Target settings popup appears, modify the required information.
4. Click [Edit].

Change logging and masking

To change the logging and masking settings of access control targets:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Security > DB & Server Access Control > Access Control Target.
2. Select the Target you want to change and click [Logging and masking settings].
3. When the Logging and masking settings popup appears, modify the required information.
4. Click [Edit].

Delete a Target

To delete a Target:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Security > DB & Server Access Control > Access Control Target.
2. Select the Target you want to delete and click [Delete Target].
3. When the Delete Target popup appears, review the target name and precautions, select the I have checked check box, and click [Yes].