<p>This article describes how to create a whitelist.</p> <p><span style="font-size:18px"><strong>Overview</strong></span></p> <p>After you successfully create an RDS PostgreSQL instance, you can perform operations by logging in to the RDS PostgreSQL database. RDS PostgreSQL service of Ping An Cloud supports open source PostgreSQL engine. Users can connect to an RDS PostgreSQL instance with any general PostgreSQL client. For the purpose of security, currently Ping An Cloud does not support an RDS PostgreSQL instance to be connected via the Internet. You need to connect to the RDS PostgreSQL instance via an ECS of Ping An Cloud.</p> <p>It is not allowed to access an RDS PostgreSQL instance by default. Therefore, you need to open a whitelist in RDS PostgreSQL console to allow an ECS to access the RDS PostgreSQL instance. Using a whitelist correctly can improve the access security of RDS PostgreSQL service.</p> <p>A general instance, remote disaster recovery instance, and read-only instance need to create whitelists respectively.</p> <p>Usage Limitations</p> <p>An RDS PostgreSQL instance currently cannot be accessed by a BMS in the East China region.</p> <p><span style="font-size:18px"><strong>Prerequisites</strong></span></p> <p>1.&nbsp; You have successfully created an instance. For more information, see <a href="http://pinganyun.com/ssr/help/database/RDS/User_Guide_RDS_PostgreSQL.Instance_Management.Create_Instance.Create_Common_Instance" target="_blank">Create a General Instance</a>, <a href="http://pinganyun.com/ssr/help/database/RDS/User_Guide_RDS_PostgreSQL.Instance_Management.Create_Instance.Create_Slave_Instance" target="_blank">Create a Remote Disaster Recovery Instance</a> or <a href="http://pinganyun.com/ssr/help/database/RDS/User_Guide_RDS_PostgreSQL.Instance_Management.Create_Instance.Create_Read_Only_Instance" target="_blank">Create a Read-Only Instance</a>.</p> <p>2.&nbsp; You have successfully created an ECS. For more information, see <a href="http://pinganyun.com/ssr/help/database/RDS/Getting_Started.RDS_PostgreSQL.Create_ECS" target="_blank">Create an ECS</a>.</p> <p><span style="font-size:18px"><strong>Usage Guidelines</strong></span><br /> If you cannot access a database instance from a whitelisted ECS, please submit a <a href="http://srvbot.paic.com.cn/#/app/requestManagement/request-new/94f98214-f02b-41a0-80a1-0ab4511bf7f2" target="_blank">Srvbot</a> request to enable the firewall service for the instance access.</p> <p><strong><span style="font-size:18px">Procedures</span></strong></p> <p>1.&nbsp; Log in to the <a href="http://pinganyun.com/console/rds/overview" target="_blank">RDS Console</a>.</p> <p>2.&nbsp; In the left navigation pane, click <strong>RDS-PostgreSQL</strong> to enter the <strong>DBPaaS for RDS-PostgreSQL</strong> page.</p> <p>3.&nbsp; Select the target region.</p> <p>4.&nbsp; In the <strong>Operation</strong> column of the target instance, click <strong>Manage.</strong> Click <strong>White List</strong> tab.</p> <p>&nbsp; &nbsp; <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20200607162200-160ad1599c53.png" style="height:23px; margin:0px; width:90px" />: You can also click the <strong>Information</strong> tab. In the <strong>Information </strong>area, click <strong>CREATE WHITELIST</strong> next to the <strong>Domain Name</strong> field to switch to the<strong> White List</strong> tab.</p> <p>5.&nbsp; In the upper-right corner of the <strong>Whitelist</strong> area, click <strong>Create</strong> <strong>Whitelist </strong>to enter the <strong>Add White List</strong> page.</p> <p>6.&nbsp; Check off the network segment of the target ECS and click <strong>Save</strong>.</p> <p><span style="font-size:18px"><strong>Result</strong></span></p> <p>1.&nbsp; In the <strong>Whitelist</strong> area, the <strong>Status</strong> of the target <strong>Subnet IP</strong> is <strong>Pending</strong>.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20200607162119-1057535b9bff.png" style="height:120px; width:830px" /></p> <p>2.&nbsp; When the <strong>Status</strong> of target subnet IP is <strong>Available</strong>, the whitelist is successfully created.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20200607162128-183f07739614.png" style="height:118px; width:830px" /></p>