GRC Store

Search / finos-ccc/ccc.rdms.cp / v2026.06-rc5

Release · v2026.06-rc5

FINOS-CCC/CCC.RDMS.CP Capability Catalog

FINOS-CCC/CCC.RDMS.CP

Capabilities for Relational Database Management System technologies, as defined by the FINOS Common Cloud Controls project.

Published by FINOS Common Cloud Controls

Install

OCI v1.1
$grcli unpack --repository finos-ccc/ccc.rdms.cp --tag v2026.06-rc5
Coordinate
oci.grc.store/finos-ccc/ccc.rdms.cp:v2026.06-rc5
Manifest digest
sha256:a4e5c8bb007e882b0ec507e8948550d92065d51b5b26804c4c17c9c396b150fd

Provenance

1 layer
Digest Media type Size
538921ef7f40… application/vnd.gemara.artifact.v1+yaml 6.3 KiB
Bundle config blob 
{
  "bundle-version": "1.0",
  "gemara-version": "v1.2.0",
  "metadata": {
    "provenance": {
      "buildDefinition": {
        "buildType": "https://grc.store/grcli/buildtype/v0",
        "externalParameters": {
          "artifact": {
            "id": "CCC.RDMS.CP",
            "type": "CapabilityCatalog"
          },
          "target": {
            "registry": "oci.grc.store",
            "repository": "finos-ccc/ccc.rdms.cp",
            "tag": "v2026.06-rc5"
          }
        },
        "internalParameters": {
          "CI": "true",
          "GITHUB_ACTIONS": "true",
          "GITHUB_ACTOR": "eddie-knight",
          "GITHUB_REF": "refs/heads/main",
          "GITHUB_REPOSITORY": "eddie-knight/common-cloud-controls",
          "GITHUB_RUN_ATTEMPT": "1",
          "GITHUB_RUN_ID": "26771723499",
          "GITHUB_SHA": "a9503345caf59a144d8ab9b4bede212b393ca56a",
          "GITHUB_WORKFLOW": "Batch Release All Catalogs",
          "RUNNER_OS": "Linux"
        },
        "resolvedDependencies": [
          {
            "name": "artifacts/database/relational/capabilities.yaml",
            "uri": "file://artifacts/database/relational/capabilities.yaml",
            "digest": {
              "sha256": "538921ef7f4010714492462d7317dff5aca28bfea77b30ec1ba151d609f65088"
            }
          },
          {
            "name": "source",
            "uri": "git+https://github.com/eddie-knight/common-cloud-controls@a9503345caf59a144d8ab9b4bede212b393ca56a",
            "digest": {
              "gitCommit": "a9503345caf59a144d8ab9b4bede212b393ca56a"
            }
          }
        ]
      },
      "runDetails": {
        "builder": {
          "id": "https://github.com/eddie-knight/common-cloud-controls/actions/runs/26771723499",
          "version": {
            "go": "go1.25.0",
            "go-arch": "amd64",
            "go-os": "linux",
            "grcli": "v0.2.2"
          }
        },
        "metadata": {
          "invocationId": "26771723499-1",
          "startedOn": "2026-06-01T17:47:18.184501022Z",
          "finishedOn": "2026-06-01T17:47:18.376365526Z"
        },
        "byproducts": [
          {
            "name": "capabilities.yaml",
            "digest": {
              "sha256": "538921ef7f4010714492462d7317dff5aca28bfea77b30ec1ba151d609f65088"
            }
          }
        ]
      }
    }
  },
  "artifacts": [
    {
      "name": "capabilities.yaml",
      "type": "CapabilityCatalog",
      "id": "CCC.RDMS.CP",
      "role": "artifact"
    }
  ]
}

CCC Relational Database Management System Capabilities

Capabilities for Relational Database Management System technologies, as defined by the FINOS Common Cloud Controls project.

ID
CCC.RDMS.CP
Version
v2026.06-rc5
Gemara version
v1.2.0
Author
FINOS Common Cloud Controls

Data Resilience

The Data Resilience group covers entries related to ensuring data availability, integrity, and sovereignty across its lifecycle. This includes replication, backup, recovery, region restrictions, and protection against data loss or corruption.

  1. CCC.RDMS.CP01 SQL Support

    Properly handle queries in the SQL language.

  2. CCC.RDMS.CP02 DB Engine Option - MySQL

    Ability to create a MySQL managed relational database.

  3. CCC.RDMS.CP03 DB Engine Option - PostgreSQL

    Ability to create a PostgreSQL managed relational database.

  4. CCC.RDMS.CP04 DB Engine Option - MariaDB

    Ability to create a MariaDB managed relational database.

  5. CCC.RDMS.CP05 DB Engine Option - SQL Server

    Ability to create a Microsoft SQL Server managed relational database.

  6. CCC.RDMS.CP13 Deletion Protection

    Protect the database against accidental deletion.

  7. CCC.RDMS.CP15 Horizontal Scaling

    Read replicas of the primary database can be created.

  8. CCC.RDMS.CP16 Failover

    Standby database can be implemented for failover when the primary can't be reached.

Access Control

The Access Control group covers entries related to authentication, authorization, and trust perimeter enforcement. This includes multi-factor authentication, least privilege access, network access rules, and prevention of unauthorized access or reconnaissance.

  1. CCC.RDMS.CP06 DB Managed Credentials

    Ability to managed the database credentials using the cloud provider's secret management service.

  2. CCC.RDMS.CP07 DB Self Managed Credentials

    Ability to manage the database credentials by client managed username and passwords.

Networking

The Networking group covers entries related to network infrastructure, connectivity, and traffic management. This includes virtual networks, subnets, load balancing, DNS, routing, peering, and network-level access controls.

  1. CCC.RDMS.CP08 Support for IPv4

    Ability to connect to the database using IPv4 addresses.

  2. CCC.RDMS.CP09 Support for IPv6

    Ability to connect to the database using IPv6 addresses

  3. CCC.RDMS.CP10 Public Access

    Allow database to be accessed by public internet.

  4. CCC.RDMS.CP11 Disable Public Access

    Prevent database been accessed by public internet.

  5. CCC.RDMS.CP12 Managed Connection Pooling

    Ability to configure a managed connection pool for the database.

Compute

The Compute group covers entries related to processing, execution, and runtime infrastructure. This includes CPU, memory, storage allocation, network ports, command-line interfaces, and elastic scaling.

  1. CCC.RDMS.CP14 Dedicated Database Instances

    Option to deploy the database on a dedicated instance for isolation requirements.