# Security

MariaDB Cloud prioritizes security, offering comprehensive protection at every level. This includes encryption in transit and at rest, encrypted storage, secure compute, and robust authentication and authorization mechanisms. It also adheres to key security standards, such as SOC2, GDPR, and ISO/IEC 27001. For more information, refer to the sections below.

## Managing Portal Users

Manage team access to your MariaDB Cloud services through role-based permissions, user invitations, removals, and modifications within the Portal's User Management console.

{% content-ref url="/pages/7z1FAPPotzRD4WkBGitd" %}
[Managing Portal Users](/docs/mariadb-cloud/security/managing-portal-users.md)
{% endcontent-ref %}

## Configuring Firewall

Control network access to your MariaDB Cloud services by configuring IP allowlists that specify which IPv4 addresses or IPv4 netblocks can connect to your service. All other traffic is blocked by default.

{% content-ref url="/pages/rraqpwALqFaGsi9YN31D" %}
[Configuring Firewall](/docs/mariadb-cloud/security/configuring-firewall.md)
{% endcontent-ref %}

## Encryption

Protect your data both in transit using TLS 1.2 and TLS 1.3 (for both client and server connections) and at rest through transparent disk encryption by the underlying cloud providers.

{% content-ref url="/pages/moJGk24ouK0XTiV6qLbt" %}
[Encryption](/docs/mariadb-cloud/security/encryption.md)
{% endcontent-ref %}

## Managing API Keys

Generate and manage API keys for secure programmatic access to your MariaDB Cloud services using the Portal's interface or the Swagger-based APIs.

{% content-ref url="/pages/NYMMv8oqvxctGzIKIMu8" %}
[Managing API keys](/docs/mariadb-cloud/security/managing-api-keys.md)
{% endcontent-ref %}

## Private VPC Connections

Use cloud-native solutions like AWS PrivateLink, GCP VPC Peering, or Azure Private Link to configure private network connections to MariaDB Cloud services to comply with regulatory or security requirements.

{% content-ref url="/pages/XKiDQHMQZqUX7ekxQtgI" %}
[Private VPC Connections](/docs/mariadb-cloud/security/private-vpc-connections.md)
{% endcontent-ref %}

## Portal Single Sign-On

Use your MariaDB Cloud ID credentials or approved social login options like Google, GitHub, or LinkedIn, or business Google G Suite to log in to the MariaDB Cloud Portal. These alternatives provide convenient Single Sign-On (SSO) without involving additional business configuration.

{% content-ref url="/pages/hT5f66J0YOxkKI447OFg" %}
[Portal Single Sign-On](/docs/mariadb-cloud/security/portal-single-sign-on.md)
{% endcontent-ref %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://mariadb.com/docs/mariadb-cloud/security.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.