ACP-Cloud1 Exam Dumps : ACP Cloud Computing Certification

To isolate ECS instances within different VSwitches in a VPC while allowing them to access the internet and other intranet resources, each VSwitch's instances should be in separate Security Groups. By configuring each group to allow all VPC CIDR blocks first and then restricting access to other VSwitch CIDR blocks with a higher priority rule, instances in each VSwitch are isolated without affecting the VPC's external connections. This approach follows Alibaba Cloud's Security Group best practices and CIDR-based access control within VPC environments.

=================

RDS provides whitelist access policies. You can set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning1. A whitelist is a list of IP addresses or CIDR blocks that are allowed to access an RDS instance. By default, the whitelist is empty, which means that no IP address can access the RDS instance. You can add IP addresses or CIDR blocks to the whitelist to allow access from specific sources. You can also modify or delete the whitelist as needed2. Whitelist access policies help improve the security of your RDS instance and protect your data from unauthorized access3. 

In Alibaba Cloud RDS, read-only instances are synchronized from the master instance but do not allow actions such as creating or deleting databases, configuring backup policies, or changing account authorizations. However, you can configure the read-only instance’s whitelist to control access.