Service integration

Available in VPC

This page explains which services you need to use with DB & Server Access Control and how to subscribe to and prepare them. The services requiring integration with the DB & Server Access Control service are as follows:

• Required integration services
  • Cloud Log Analytics: Stores access history logs collected by the proxy server. Subscribe to it before subscribing to DB & Server Access Control.
  • Sub Account: Required for client login and for setting target access permissions for each user.
  • Object Storage: Required to create buckets for long-term retention of access records, as required by regulations such as the Personal Information Protection Act.
• Optional integration services
  • Data Query: Query and analyze logs retained in Object Storage using SQL.
  • Cloud Activity Tracer: Automatically records administrative tasks performed in the DB & Server Access Control console.
• Required services for each connection environment
  • SSL VPN: Required to connect to the proxy server through the client in an environment with internet access.
  • IPsec VPN: Required to connect to a VPC from a closed network environment with no internet access.

Cloud Log Analytics

NAVER Cloud Platform's Cloud Log Analytics is a paid service that you can use after subscribing. The DB & Server Access Control service first checks whether Cloud Log Analytics is in use on the subscription screen, and if it is not in use, the subscription cannot be completed. Make sure to subscribe to this service first before subscribing to the DB & Server Access Control service. Learn more in the Cloud Log Analytics user guide.

Sub Account

NAVER Cloud Platform's Sub Account service is provided free of charge and does not require a separate subscription. The DB & Server Access Control service does not have its own user permission system and uses the user-defined policies in Sub Account as access control policies. After creating a target, create a user-defined policy that includes access permissions for the target and assign it to a sub account. You can log in to the client only with a sub account. Learn more in the Sub Account user guide.

Object Storage

NAVER Cloud Platform's Object Storage is a paid service, and you can create buckets after subscribing to the service. Related regulations, such as the Personal Information Protection Act and the Information and Communications Network Act (ISMS-P), require that access records to personal information processing systems be preserved for at least 1 year. Create a bucket in advance to export logs from Cloud Log Analytics to Object Storage for long-term retention. Learn more in the Object Storage user guide.

SSL VPN

NAVER Cloud Platform's SSL VPN is a paid service that you can use after subscribing. When using DB & Server Access Control Client in an environment with internet access, connect to the proxy server through SSL VPN. Learn more in the SSL VPN user guide.

IPsec VPN

NAVER Cloud Platform's IPsec VPN is a paid service that you can use after subscribing. When using DB & Server Access Control Client in a closed network environment with no internet access, you must configure IPsec VPN. Learn more in the IPsec VPN user guide.

Data Query

NAVER Cloud Platform's Data Query is a paid service that can be optionally integrated. Use SQL queries to view and analyze access history logs retained in Object Storage. It is useful when you need to search for access records of a specific period or analyze access patterns for audit purposes. Learn more in the Data Query user guide.

Cloud Activity Tracer

NAVER Cloud Platform's Cloud Activity Tracer is a service that can be optionally integrated. It automatically records the history of management operations performed on the console without separate configuration. The history of console management operations in the DB & Server Access Control service, such as target creation/deletion and access permission changes, is preserved in Cloud Activity Tracer, making it available for use in internal security audits or compliance reviews. Learn more in the Cloud Activity Tracer user guide.