How-to guides

• 1: DB Service Manage
• 2: Backing up and restoring the DB
• 3: Secondary Add
• 4: Microsoft SQL Server(DBaaS) Server Connection

1 - DB Service Manage

Users can manage Microsoft SQL Server (DBaaS) through the Samsung Cloud Platform Console.

Managing the Database

For the Microsoft SQL Server Enterprise edition, you can add a new database. Up to 100 can be added per cluster.

Add Database

To add a Database, follow these steps.

1. Click the All Services > Database > Microsoft SQL Server (DBaaS) menu. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. Click the Microsoft SQL Server(DBaaS) menu on the Service Home page. You will be taken to the Microsoft SQL Server(DBaaS) List page.
3. On the Microsoft SQL Server(DBaaS) List page, click the resource to add storage. You will be taken to the Microsoft SQL Server(DBaaS) Details page.
4. Click the Add button in the Database name field. The Add Database popup window opens.
5. In the Add Database popup window, click the + button to enter the Database name and select a drive, then click the Confirm button.

Delete Database

To delete the database, follow these steps.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. Navigate to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. Navigate to the Microsoft SQL Server(DBaaS) List page.
3. On the Microsoft SQL Server(DBaaS) List page, click the resource to add storage. You will be taken to the Microsoft SQL Server(DBaaS) Details page.
4. Click the Edit button for the Database name field. The Add Database Delete popup window opens.
5. Additional Database Deletion In the request popup, check the Database you want to delete and click the Delete button. The Database Deletion popup opens.
6. Delete Database In the popup window, enter the name of the Database you want to delete, then click the Confirm button.

Managing Parameters

Provides a feature that enables easy viewing and modification of database configuration parameters.

Query Parameter

To view configuration parameters, follow these steps.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. You will be taken to the Service Home page of Microsoft SQL Server(DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. Navigate to the Microsoft SQL Server(DBaaS) List page.
3. Microsoft SQL Server(DBaaS) List page, click the resource whose parameters you want to view or modify. Microsoft SQL Server(DBaaS) Details page will open.
4. Click the More button, then click the Parameter Management button. The Parameter Management popup window opens.
5. Parameter Management popup window, click the Search button. Search Notification popup window opens.
6. Lookup Notification When the popup window opens, click the Confirm button. The lookup may take a short amount of time.

Modify Parameter

To modify the configuration parameters, follow these steps.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. Go to the Service Home page of Microsoft SQL Server(DBaaS).
2. Click the Microsoft SQL Server(DBaaS) menu on the Service Home page. You will be taken to the Microsoft SQL Server(DBaaS) List page.
3. On the Microsoft SQL Server(DBaaS) List page, click the resource whose parameters you want to view or modify. You will be taken to the Microsoft SQL Server(DBaaS) Details page.
4. Click the More button, then click the Parameter Management button. The Parameter Management popup opens.
5. Parameter Management popup window, click the Search button. Search Notification popup window opens.
6. Lookup Notification When the popup window opens, click the Confirm button. Retrieving the data may take a short time.
7. If modification is needed, click the Edit button and enter the changes in the custom value area of the Parameter to be edited.
8. When the input is complete, click the Complete button.

Managing DB Users

Provides functionality to query and manage DB user information.

Query DB Users

To retrieve DB users, follow the steps below.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. Navigate to the Service Home page of Microsoft SQL Server(DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. You will be taken to the Microsoft SQL Server(DBaaS) List page.
3. On the Microsoft SQL Server(DBaaS) List page, click the resource for which you want to view DB users. You will be taken to the Microsoft SQL Server(DBaaS) Details page.
4. Click the More button, then click the DB User Management button. You will be taken to the DB User Management page.
5. DB User Management page, click the Search button. The search may take a short amount of time.

Change DB User Status

Follow these steps to change the status of the retrieved DB user.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. You will be taken to the Service Home page of Microsoft SQL Server(DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. You will be taken to the Microsoft SQL Server(DBaaS) List page.
3. On the Microsoft SQL Server(DBaaS) List page, click the resource whose DB user you want to modify. You will be taken to the Microsoft SQL Server(DBaaS) Details page.
4. Click the More button, then click the DB User Management button. You will be taken to the DB User Management page.
5. On the DB User Management page, click the Search button. Retrieving may take a short time.
6. If a correction is needed, click the Edit button, then change the status field value or enter remarks.
7. When the input is complete, click the Complete button.

Modify Audit Settings

You can modify the Audit log storage settings for Microsoft SQL Server (DBaaS).

To change the Audit log storage settings of Microsoft SQL Server(DBaaS), follow the steps below.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. Go to the Service Home page of Microsoft SQL Server(DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. You will be taken to the Microsoft SQL Server(DBaaS) List page.
3. On the Microsoft SQL Server(DBaaS) List page, click the resource to view the service status. You will be taken to the Microsoft SQL Server(DBaaS) Details page.
4. Click the Edit icon of Audit Settings at the bottom of the detailed information. The Edit Audit Settings popup window opens.
5. Edit Audit Settings After changing the usage in the popup window, click the Confirm button.
   • Use selected, the Audit log feature is enabled. Enabling the Audit log may degrade DB performance.
   • Disabling use will delete the Audit log storage file. Back up the Audit log file separately before disabling.

DB Log Export

Supports exporting log data that requires long-term retention among audit logs to Object Storage. Users can directly set the log types to be stored, the target Bucket for export, and the export interval. Based on the configured criteria, logs are copied to the specified Object Storage for retention. Additionally, to efficiently manage disk space, we also provide an option that exports logs to Object Storage while automatically deleting the original log files. By using this option, you can effectively free up storage capacity while safely retaining the necessary log data for long-term storage.

Setting DB Log Export Mode

To set the DB Log export mode, follow these steps.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. You will be taken to the Service Home page of Microsoft SQL Server(DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. You will be taken to the Microsoft SQL Server(DBaaS) List page.
3. On the Microsoft SQL Server(DBaaS) List page, click the resource whose DB Log you want to export. You will be taken to the Microsoft SQL Server(DBaaS) Details page.
4. Click the More button, then click the DB Log Export button. You will be taken to the DB Log Export page.
5. On the DB Log Export page, click the Register button. You will be taken to the DB Log Export Register page.
6. On the DB Log Export Registration page, after entering the required information, click the Complete button.

   Category	Required	Detailed description
   Log type	Required	Log type to be saved
   Save bucket name	Required	Object Storage bucket name to be saved
   Authentication key > Access key	Required	Access key to access the Object Storage you want to store
   Authentication key > Secret key	Required	Secret key for accessing the Object Storage you want to store
   File creation interval	Required	File creation frequency in Object Storage
   Whether to delete the original log	Selection	Whether to delete the original logs when exporting to Object Storage

   Table. Microsoft SQL Server (DBaaS) DB Log Export Configuration Items

Managing DB Log Export

To modify, cancel, or immediately export the DB Log export settings, follow the steps below.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. Navigate to the Service Home page of Microsoft SQL Server(DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. You will be taken to the Microsoft SQL Server(DBaaS) List page.
3. On the Microsoft SQL Server(DBaaS) List page, click the resource you want to manage DB Log export for. You will be taken to the Microsoft SQL Server(DBaaS) Details page.
4. Click the More button, then click the DB Log Export button. You will be taken to the DB Log Export page.
5. On the DB Log Export page, depending on the log type you want to manage, click the More button and then click the Export Now, Edit, or Cancel buttons.
   • Export Immediately: The selected logs are exported to the bucket of the previously configured Object Storage.
   • Edit: Modify the DB Log export mode settings.
   • Cancel: Cancel the DB Log export mode setting.

Minor Version Upgrade

We provide version upgrade functionality for some feature improvements and security patches. Only Minor version upgrades within the same Major version are supported.

To upgrade the Minor Version, follow the steps below.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. Navigate to the Service Home page of Microsoft SQL Server(DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. You will be taken to the Microsoft SQL Server(DBaaS) List page.
3. Microsoft SQL Server(DBaaS) List page, click the resource to upgrade the version. Navigate to the Microsoft SQL Server(DBaaS) Details page.
4. Click the Edit button of the Image version item. The Version Upgrade popup window opens.
5. Version Upgrade In the popup, select the updated version and backup setting, then click the Confirm button.
6. Version Upgrade Notification Click the Confirm button in the popup window.

2 - Backing up and restoring the DB

Users can configure backups of Microsoft SQL Server (DBaaS) through the Samsung Cloud Platform Console and restore from the backed‑up files.

Microsoft SQL Server(DBaaS) Backup

Microsoft SQL Server (DBaaS) provides a data backup feature based on its own backup commands. Additionally, it provides an optimized backup environment for data protection and management through backup history verification and backup file deletion features.

Configure backup

For backup configuration of Microsoft SQL Server (DBaaS), see the Microsoft SQL Server(DBaaS) Creating guide.

To modify the backup settings of the created resource, follow the steps below.

1. All Services > Database > Microsoft SQL Server(DBaaS) Click the menu. 1. Go to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Navigate to the page.
3. Microsoft SQL Server(DBaaS) List Click the resource on the page to configure backup. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Click the Edit button for the backup item. 4. Backup Settings popup opens.
5. When setting up a backup, click Use in the Backup Settings popup, select retention period, backup start time, and Archive backup interval, then click the Confirm button.
   • If you stop the backup configuration, deselect Use in the Backup Settings popup and authenticate using the logged-in user’s mobile phone.
     Once user authentication is complete, the backup configuration is disabled and backup execution stops.

Check backup history

To view the backup history, follow these steps.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. 1. Go to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Go to the page.
3. Microsoft SQL Server(DBaaS) List page, click the resource to view the backup history. 3. Microsoft SQL Server(DBaaS) Details Navigate to the page.
4. Click the Backup History button. 4. Backup History The popup window opens.
5. Backup History In the popup window, you can view the backup status, version, backup start time, backup completion time, and size.

Delete backup file

To delete the backup history, follow these steps.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. 1. Go to the Service Home page of Microsoft SQL Server (DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Navigate to the page.
3. Microsoft SQL Server(DBaaS) List Click the resource on the page to view the backup history. 3. Microsoft SQL Server(DBaaS) Details Go to the page.
4. Click the Backup History button. 4. Backup History The popup window opens.
5. Backup History In the popup, check the files you want to delete, then authenticate via the logged-in user’s mobile phone.
   • When user authentication is completed, the backup file is deleted.

Microsoft SQL Server(DBaaS) Recovery

If a backup file needs to be restored due to a failure or data loss, the recovery feature allows restoration based on a specific point in time. When you perform a Microsoft SQL Server(DBaaS) recovery, a new server is created with the OS image from the initial provisioning point, the database is installed with the version from the backup point, and the recovery proceeds using the database’s configuration information and data.

To recover Microsoft SQL Server (DBaaS), follow the steps below.

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. 1. Go to the Service Home page of Microsoft SQL Server(DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. 2. Microsoft SQL Server(DBaaS) List Navigate to the page.
3. Microsoft SQL Server (DBaaS) resource On the list page, click the resource you want to recover. 3. Microsoft SQL Server(DBaaS) Details Go to the page.
4. Click the Database Recovery button. 4. Go to the Database Recovery page.
5. After entering the relevant information in the Database Recovery Configuration area, click the Complete button.

   Category	required status	Detailed description
   Recovery Type	required	Set the point in time the user wants to recover Backup point (recommended): Recover based on the backup file. Select from the list of backup points displayed in the list Custom point: Recover to a user‑desired point within the range of recoverable backup times. The recoverable period depends on the Archive backup cycle setting, allowing recovery from the initial backup start time up to 1 hour/30 minutes/10 minutes/5 minutes before the current time. Select the date and time to back up
   Server name prefix	Required	Recovery DB server name Start with a lowercase English letter and use lowercase letters, numbers, and special characters (-) to enter 3 to 16 characters Based on the server name, a postfix such as 001, 002 is appended to generate the actual server name
   Cluster name	Essential	Recovery DB cluster name Enter using English letters, 3 ~ 20 characters A cluster is a unit that groups multiple servers
   Service Type > Server Type	Required	Recovery DB Server Type Standard: Standard specification commonly used High Capacity: Large-capacity server with 24 vCores or more
   Service Type > Planned Compute	Selection	Status of resources with Planned Compute configured In Use: Number of resources with Planned Compute configured that are currently in use Configured: Number of resources with Planned Compute configured Coverage Preview: Amount applied per resource by Planned Compute Create Planned Compute Service: Navigate to the Planned Compute service application page For more details, see Planned Compute Apply
   Service Type > Block Storage	Required	Block Storage settings used by the recovery DB Base OS: Area where the DB engine is installed DATA: Data storage area Applied identically with the storage type set in the source cluster Enter capacity as a multiple of 8 within the range 16 to 5,120 Additional: Data storage area Applied identically with the storage type set in the source cluster In the recovery DB, only DATA and TEMP purposes can be added After selecting Use, enter the storage purpose and capacity To add storage, click the Add button, and to delete, click the x button Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
   Database username	Required	Database username Apply the same username set in the original cluster
   Database Port number	Essential	Database Port number Apply the same Port number as set in the original cluster
   IP access control	Select	Service Access Policy Configuration Since the access policy is set for the IP entered on the page, you do not need to configure a separate Security Group policy Enter in IP format (example: 192.168.10.1) or CIDR format (example: 192.168.10.0/24, 192.168.10.1/32) and click the Add button To delete an entered IP, click the x button next to the entered IP
   maintenance period	Select	Database maintenance window If you select Use, set the day, start time, and duration It is recommended to set a maintenance window for stable management of the DB. Patch operations will be performed at the scheduled time, causing service interruption If set to not use, Samsung SDS is not responsible for issues arising from unapplied patches.
   tag	Selection	Add Tag After clicking the Add Tag button, enter or select Key, Value

   Table. Microsoft SQL Server (DBaaS) recovery configuration items

3 - Secondary Add

The user can enter the required information for Secondary through the Samsung Cloud Platform Console and create the service using detailed options.

Add Secondary

You can create a read‑only replica server by configuring a Secondary. To add additional Secondaries, they must be created with a high‑availability (HA) configuration and Enterprise Edition, and the backup feature must be enabled.

To configure Secondary, follow the steps below.

1. All Services > Database > Microsoft SQL Server(DBaaS) Click the menu. Navigate to the Service Home page of Microsoft SQL Server(DBaaS).
2. On the Service Home page, click the Microsoft SQL Server(DBaaS) menu. You will be taken to the Microsoft SQL Server(DBaaS) List page.
3. On the Microsoft SQL Server(DBaaS) List page, click the resource to configure Secondary. You will be taken to the Microsoft SQL Server(DBaaS) Details page.
4. Click the Secondary Add button. Navigate to the Secondary Add page.
5. After entering information in the Secondary configuration area, click the Create button.

   Category	Required status	Detailed description
   Secondary number	Required	Number of Secondary to configure Only one can be configured per cluster
   Secondary name	Required	Secondary server name must start with a lowercase English letter, and use lowercase letters, numbers, and special characters(-) to enter 3 to 15 characters The entered Secondary name is displayed as the cluster name in the list
   Service Type > Server Type	Required	Secondary server type Apply the same as the server type set in the source DB
   Service Type > Planned Compute	Select	Status of resources with Planned Compute configured In Use: Number of resources with Planned Compute that are currently in use Configured: Number of resources with Planned Compute configured Coverage Preview: Amount applied per resource by Planned Compute Create Planned Compute Service: Go to the Planned Compute service request page For more details, refer to Apply for Planned Compute
   Network > Common Settings	Required	Network settings where servers generated by the service are installed Applied identically to the network settings configured in the original DB
   Network > Server-specific Settings	Required	Network settings for servers deployed by the service Select when you want to apply different settings per installed server Apply the same network settings as configured in the source DB When configuring per server 10.10.10.0/24 Enter an IP address within the range
   License	Required	SQL Server License Key Enter the issued license key If the entered license key is not valid, the service may not be created

   Table. Microsoft SQL Server (DBaaS) Secondary configuration items

4 - Microsoft SQL Server(DBaaS) Server Connection

Scenario Overview

Microsoft SQL Server(DBaaS) server connection scenario involves creating a Bastion host (Virtual Server) and a Database service, and accessing the DB service through the Bastion host. To reliably connect to Microsoft SQL Server(DBaaS) in the Samsung Cloud Platform environment, you need to create a Bastion host and establish network connectivity through it. To maintain stability and a high level of security, it is recommended to configure the Database service in a Private Subnet environment and place the Bastion host in a restricted Public Subnet environment.

This scenario primarily describes creating a Bastion host and a Database service, configuring the network environment for Bastion host and Database access, and connecting through a DB client.

Scenario components

You can build the scenario using the following services.

Scenario setup method

Create the services required to compose the scenario by following the steps below.

Set up the network

Describes the process of configuring the network environment for accessing the Bastion Host and Database services.

1-1. Create VPC

1. Click the All Services > Networking > VPC menu. You will be taken to the VPC Service Home page.
2. Click the VPC Creation button on the Service Home page. You will be taken to the VPC Creation page.
3. On the VPC Creation page, enter the information required to create the service.
   • Enter the IP range as 192.168.x.0/16.
4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • When creation is complete, check the created resources on the VPC List page.

1-2. Create Subnet

1. Click the All Services > Networking > VPC menu. You will be taken to the VPC Service Home page.
2. On the Service Home page, click the Subnet menu. You will be taken to the Subnet List page.
3. Click the Create Subnet button. You will be taken to the Create Subnet page.
4. On the Subnet Creation page, enter the information required to create the service.
   • Select the Subnet type as General.
   • Select a pre‑created VPC.
   • Enter the IP range as 192.168.x.0/24.
5. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • After creation is complete, check the created resources on the Subnet list page.

1-3. Create Internet Gateway

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. You will be taken to the Internet Gateway List page.
3. Click the Create Internet Gateway button. Navigate to the Create Internet Gateway page.
4. Internet Gateway Creation page, enter the required information for creating the service.
   • Select a pre‑created VPC.
   • In the Firewall usage option, select Use.
5. In the Summary panel, verify the detailed information and estimated billing amount, and click the Complete button.
   • Once creation is complete, verify the created resource on the Internet Gateway List page.

1-4. Create Public IP

1. Click the All Services > Networking > VPC menu. Navigate to the VPC Service Home page.
2. Click the Public IP menu on the Service Home page. You will be taken to the Public IP List page.
3. Click the Public IP Reservation button. You will be taken to the Public IP Reservation page.
4. On the Public IP reservation page, enter the required information needed to reserve the service.
5. In the Summary panel, verify the detailed information and estimated billing amount, then click the Complete button.
   • When creation is complete, check the created resources on the Public IP list page.

1-5. Create Security Group

1. Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of Security Group.
2. Click the Create Security Group button on the Service Home page. You will be taken to the Create Security Group page.
3. On the Security Group creation page, enter the required information needed to create the service.
4. Check the input information and click the Complete button.
   • When creation is complete, check the created resources on the Security Group list page.

Create Bastion host

Describes the process of configuring a Bastion Host that requires the database client to be installed.

2-1. Create Server Keypair

1. Click the All Services > Compute > Virtual Server menu. Navigate to the Service Home page of Virtual Server.
2. On the Service Home page, click the Keypair menu. You will be taken to the Keypair List page.
3. Click the Create Keypair button. You will be taken to the Create Keypair page.
4. Enter the required information for creating a service on the Keypair creation page.
5. Verify the creation information and click the Complete button.
   • The key can be downloaded only on the first attempt, and reissuance is not available.
   • Please store the downloaded key in a secure location.

2-2. Create Bastion host

1. Click the All Services > Compute > Virtual Server menu. Navigate to the Service Home page of Virtual Server.
2. On the Service Home page, click the Create Virtual Server button. You will be taken to the Create Virtual Server page.
3. On the Virtual Server Creation page, enter the required information to create the service.
   • Select Windows for the image.
   • Select the pre-created VPC and Subnet.
   • Click Use NAT, then select the reserved Public IP from 1-4. Create Public IP.
   • Connect the Keypair created in 2-1. 서버 Keypair 생성하기.
4. In the Summary panel, verify the detailed information and estimated billing amount, then click the Complete button.
   • When creation is complete, check the created resources on the Virtual Server List page.

2-3. Verify Bastion host login ID and PW

1. Click the All Services > Compute > Virtual Server menu. Navigate to the Service Home page of Virtual Server.
2. On the Service Home page, click the Virtual Server menu. You will be taken to the Virtual Server List page.
3. On the Virtual Serve List page, click the resource you created in 2-2. Bastion host Create. You will be taken to the detailed information page for that resource.
4. On the detail information page, click the RDP password view button in the Keypair name field. The RDP password view popup window opens.
5. In the popup window, perform RDP password lookup, and attach the keypair file downloaded from 2-1. Create Server Keypair.
6. After attaching, click the Password Check button. The ID and Password for accessing the resource are displayed.
   • The ID and password will later be used as credentials to connect to the Bastion host in 5-1. Bastion host Connecting.

Create Database

Describes the process of creating a Database service.

3-1. Microsoft SQL Server(DBaaS) Create Service

1. Click the All Services > Database > Microsoft SQL Server(DBaaS) menu. Go to the Service Home page of Microsoft SQL Server(DBaaS).
2. On the Service Home page, click the Create Microsoft SQL Server (DBaaS) button. Navigate to the Create Microsoft SQL Server (DBaaS) page.
3. On the Microsoft SQL Server(DBaaS) Creation page, enter the required information to create the service.
   • Select the pre‑created VPC and Subnet and connect them.
   • Enter database-related creation details on the required information input screen.
   • Add the Bastion host IP in the IP access control settings.
   • The database port defaults to 2866, but users can also specify it.
4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • After creation is complete, check the created resource on the Microsoft SQL Server(DBaaS) list page.

Configuring Rules

It explains the process of configuring rules for a user to connect to the Bastion host and rules for connecting to the Database from the Bastion host.

4-1. Adding security rules to Security Group

1. Click the All Services > Networking > Security Group menu. Go to the Service Home page of Security Group.
2. Click the Security Group menu on the Service Home page. You will be taken to the Security Group List page.
3. 1-5. Creating a Security Group Select the Security Group resource you created. Navigate to the detailed information page for that resource.
4. Click the Rules tab on the detail page. You will be taken to the Rules tab.
5. On the Rules tab, click the Add Rule button. It takes you to the Add Rule popup.
6. Add Rule In the popup window, enter the rule below, and click the Confirm button.

   direction	remote	target address	Protocol	Port	Explanation
   Inbound	CIDR	User PC IP	TCP	3389 (RDP)	Bastion client PC → Bastion host
   Outbound	CIDR	DB IP	TCP	Database Port (manual entry)	Bastion host → Database

   Table. Security Group rules that need to be added

4-2. Add IGW Firewall rule

1. All Services > Networking > Firewall Click the menu. Then navigate to the Service Home page of Firewall.
2. From the Service Home page, click the Firewall menu. You will be taken to the Firewall List page.
3. On the Firewall List page, select the Internet Gateway resource name created in 1-3. Create Internet Gateway. You will be taken to the detailed information page of that resource.
4. Click the Rules tab on the detail information page. You will be taken to the Rules tab.
5. Click the Add Rule button on the Rules tab. It navigates to the Add Rule popup.
6. Add Rule In the popup window, enter the rule below, and click the Confirm button.

   origin address	Destination address	Protocol	Port	operation	direction	Explanation
   Bastion connection PC IP	Bastion host IP	TCP	3389(RDP)	Allow	Inbound	User PC → Bastion host

   Table. Internet Gateway Firewall rules that need to be added

Connect to Database

Describes the process of a user accessing the database via a DB client program.

This guide explains how to connect using SSMS(Microsoft SQL Server Management Studio). Since there are various database client programs and CLI utilities, you may install and use the tool that best fits your needs.

5-1. Connect to Bastion host

1. In the Windows environment of the PC that will connect to the Bastion host, run Remote Desktop Connection, then enter the NAT IP of the Bastion Host and click the Connect button.
2. When the remote desktop connection succeeds, the user credential input window opens. Enter the ID and Password verified in 2-3. Check Bastion host login ID and PW and click the Confirm button.

5-2. Install the DB client program (SSMS) on the Bastion host

1. Go to the official Microsoft SQL Server page and download the SSMS program.
   • SSMS program download URL: https://learn.microsoft.com/en-us/ssms/download-sql-server-management-studio-ssms
2. Connect the user’s PC hard drive to upload the file to the Bastion host.
3. In the Remote Desktop Connection’s Local Resources tab, click the Details button for the Local Devices and Resources item.
4. Select the local disk of the location where the file was downloaded on the drive, and click the OK button.
5. Copy the downloaded file, upload it to the Bastion Host, and click the SSMS (Microsoft SQL Server Management Studio) installation file to install.

5-3. Connect to the Database using the DB client program (SSMS)

1. Run SSMS (Microsoft SQL Server Management Studio). A Connect to Server popup will appear.
2. Connect to Server In the popup window, enter the Database server information created in 3-1. Microsoft SQL Server(DBaaS) 서비스 생성하기 and click the Connect button.

   Required input field	input value
   Server type	Database Engine
   Server name	Database server IP, Database Port (ex. 192.168.10.1,2866)
   Authentication	SQL Server Authentication
   Login	Database username
   Password	Database password
   Encryption	Optional

   Table.DB connection client program input fields
3. Once the connection is established, the database will be accessed. After connecting, you can execute simple queries, among other tasks.