Managed databases
Provision databases as managed project resources, wait for readiness, then bind them to services without exposing credentials.
Create in Portal or MCP
Select Add service, choose the database type, environment, version, and storage. MCP must produce a zero-write plan before apply.
Wait for readiness
Provisioning submission is not success. Wait for the provider and a functional database check.
Bind consumers
Use generated write-only credentials through a typed binding. Redeploy the consumer after adding or changing the binding.
Control public access
Private project networking is the default. A public secure endpoint is approval-gated and should be restricted by IP policy.