We are excited to announce that Hyper Protect DBaaS is now integrated with the IBM Cloud Security and Compliance Center to help you to monitor security and compliance for your organization.
Monitoring security and compliance posture
As a security or compliance focal, you can use the IBM Cloud Security and Compliance Center to validate the resource configurations in your account against a predefined set of control implementations called goals. You can define the scope of the scans and the frequency at which you want the scan to run.
Currently, IBM Cloud Hyper Protect DBaaS has the following goals:
- Check whether Hyper Protect DBaaS is accessible only by using private endpoints.
- Check whether Hyper Protect DBaaS is enabled with customer-managed encryption and Bring Your Own Key (BYOK)
- Check whether Hyper Protect DBaaS is enabled with customer-managed encryption and Keep Your Own Key (KYOK)
Governing resource configuration
With the Security and Compliance Center, you can also define config rules for the Hyper Protect DBaaS service instances that you create, which significantly decreases the likelihood of a misconfiguration that could lead to a security vulnerability. For now, Hyper Protect DBaaS only supports the ability to view the results of your configuration scans (without real-time enforcement).
For more information and instructions, check out the following resources:
- Managing security and compliance with Hyper Protect DBaaS for MongoDB
- Managing security and compliance with Hyper Protect DBaaS for PostgreSQL
About IBM Cloud Hyper Protect DBaaS
IBM Cloud Hyper Protect DBaaS offers secure enterprise database environments for your sensitive data. It currently supports two database types — PostgreSQL and MongoDB Enterprise.
Hyper Protect DBaaS implements security protections at all levels, including workload isolation and runtime protection, data encryption (Keep Your Own Key) and identity and administration access control. In addition to several common certifications, DBaaS is also Financial Services Validated. For more information about how it protects your data, see Securing your data in Hyper Protect DBaaS for MongoDB or in Hyper Protect DBaaS for PostgreSQL.
Get started with IBM Cloud Hyper Protect DBaaS
Go to the IBM Cloud Catalog to try out the 30-day free plan for Hyper Protect DBaaS. You can choose between two database options:
Check out the Getting Started video to get a general idea about how to get started with the service. For detailed steps, see the Hyper Protect DBaaS for PostgreSQL documentation or the Hyper Protect DBaaS for MongoDB documentation.