Privacera Platform master publication

Add and scan resources in a data source

:
Steps

The following example enables scanning on an AWS-Aurora DB resource. It is recommended that you familiarize yourself with the names of the resources you want to enable before scanning as they will appear in a drop-down menu.

To enable scanning on an AWS resource:

  1. From the navigation menu, select Discovery > Data Source.

  2. From the Applications list, select AWS-Aurora DB.

  3. Click Add to add a resource for scanning.

    1. Type the text of the resource and it will display the list of resources that matches the text.

    2. Select the scan type.

    3. Click Save.

  4. Click the Status toggle to globally enable scanning.

    • For real-time scan, resources will be automatically scanned when they are added to the Included Resources list.

    • For offline scan, click Scan Resource button to initiate a scan.

  5. Repeat these steps as needed for other data resources or applications you intend to enable for scanning.

    • The names of displayed fields will be different depending on the type of resource or application you are configuring (for example, Include Resource or Include Database or Table).

    • Resources in the landing zones are automatically scanned by Privacera. For more information on Data Zones see Data Zones.

Google Cloud Storageand Google BigQuery

Using a single Google Cloud Storage or Google BigQuery data source, you can scan resources from multiple projects. You can search for projects to be added, and select resources from the project to be included for scanning. To retrieve the list of projects in Google Cloud Storage or Google BigQuery, configure the Google Cloud Manager API.

Note

Data Explorer does not support showing resources from multiple projects. It only shows resources for the project with which the data source is configured.

Prerequisites

To allow Privacera search for projects on your Google account, you need to enable the API services in the GCP project you registered as a data source. Refer the Google documentation to enable API services.

Add resources to Google Cloud Storage or Google BigQuery data sources

Before you can add resources to a data source, your data source must be registered and the prerequisite requirements must be met in order to continue. For more information on registering a data source, see data source registration.

  1. From the navigation menu, select Discovery > Data Source.

  2. From the Applications section, select a Google Cloud Storage or Google BigQuery data source.

  3. Click Add.

  4. In the Add Resource dialog, enter the following:

    1. Enter the Project ID of the resource you want to scan. You can enter an asterisk (*) to get a list of projects.

      • For Google BigQuery, the Project ID will be appended to the dataset or table name.

      • For Google Cloud Storage, the Project ID will not append to the bucket name as they are unique across a project.

    2. Enter the Resource you are including in the project.

      Note

      Resources can be added from multiple projects. Existing resources will be updated with a project ID. If you have resources in a specific directory, you can add this location path so that all of the databases/tables in that location are scanned.

      • For Google Cloud Storage, add the bucket resources.

      • For Google BigQuery, add the datasets or tables.

    3. Select a scan type:

      • Scan: Select this option if you want to perform real-time/offline scan.

      • Incremental: Select this option if you want to scan the resource once. During a re-scan, the resource gets added in the Excluded Resources list.

    4. Multi-input: Turn on this button if you want to switch to a multiple input view and add multiple resources, one per line.

    5. Click Save.

  5. To enable the real-time/offline scan for the Google Cloud Storage or Google BigQuery data source, click the Status toggle.