| copyright |
|
||
|---|---|---|---|
| lastupdated | 2026-03-10 | ||
| keywords | context-based restrictions, allowlist, disaster recovery | ||
| subcollection | cloud-databases |
{{site.data.keyword.attribute-definition-list}}
{: #cdb-secure-service}
- Context-based restrictions give account owners and administrators the ability to define and enforce access restrictions for {{site.data.keyword.cloud_notm}} resources based on the context of access requests. Access to {{site.data.keyword.databases-for}} resources can be controlled with context-based restrictions and Identity and Access Management (IAM) policies. For more information, see Protecting your {{site.data.keyword.databases-for}} instance with context-based restrictions.
- To restrict access to your databases, allowlist specific IP addresses or ranges of IP addresses on your deployment. Using IBM Cloud's native context-based restrictions is recommended over using the allowlist, which is deprecated. For more information, see Allowlisting.
- Disaster recovery{: term} involves a set of policies, tools, and procedures for returning a system, an application, or an entire data center to full operation after a catastrophic interruption. It includes procedures for copying and storing an installed system's essential data in a secure location, and for recovering that data to restore normalcy of operation. For more information, see Understanding business continuity and disaster recovery for {{site.data.keyword.databases-for}}.
{: #cdb-secure-service-next-steps}
You've now provisioned a {{site.data.keyword.databases-for}} service instance, set up notifications and monitoring, and secured it. Next, jump into the specific Getting Started documentation for your chosen service.
-
{{site.data.keyword.databases-for-postgresql}}{: external}
-
{{site.data.keyword.databases-for-mongodb}}{: external}
-
{{site.data.keyword.databases-for-redis}}{: external}
-
{{site.data.keyword.databases-for-elasticsearch}}{: external}
-
{{site.data.keyword.databases-for-mysql}}{: external}
-
{{site.data.keyword.messages-for-rabbitmq}}{: external}
Alternatively, you can provision a specific a {{site.data.keyword.databases-for}} service instance by using pre-built, open-source, enterprise-ready Terraform IBM Modules (TIM), which are curated collections of Terraform modules that simplify creating, managing, and versioning complex, compliant environments on IBM Cloud. You can explore all related modules at the following:
- Terraform IBM Modules (TIM) GitHub Repository{: external}
- Terraform IBM Modules (TIM) Registry{: external}