Connect Heroku PostgreSQL to DSPM

Overview

Netskope DSPM supports scanning Heroku PostgreSQL Data Stores. Follow these instructions to set up your Heroku PostgreSQL database and configure its connection to Netskope DSPM.

Prerequisites:

You have access to configure service accounts within Heroku applications.

Create a Netskope DSPM Service Account

A Heroku PostgreSQL service account within the database is required for connecting your data store with the Netskope DSPM application. Please follow the steps below to configure the service account within the Heroku dashboard.

Steps

1. As the authorized Heroku user, click this link to log into your Heroku portal, which will navigate you to the main dashboard.
2. On the Apps tab, select the name of your application. The application’s Overview tab is displayed.
3. Click on the Resources tab.  
4. Under the Add-ons section, select the name of your Heroku PostgreSQL resource. The resource’s Overview tab is displayed.
5. Click the Credentials tab.
6. Click the Create Credential button.

7. Enter the following values:

8. Click the save button.

Retrieve Connection Information

Please follow the steps below to identify the connection values to communicate Netskope DSPM with your Heroku PostgreSQL database.

1. As the authorized Heroku user, click this link to log into your Heroku portal, which will navigate you to the main dashboard.
2. On the Apps tab, select the name of your application. The application’s Overview tab is displayed.

   

   
3. Click on the Resources tab.  

   

   
4. Under the Add-ons section, select the name of your Heroku PostgreSQL resource. The resource’s Overview tab is displayed.

   

   
5. Select the credential created in the above section. The credential’s details are displayed.

6. Take note of the following values for later use:

Generate Heroku API Key

1. As the Netskope DSPM-specific Heroku user, click this link to log into your Heroku portal, which will navigate you to the main dashboard.
2. In the upper-right, click your user icon
3. Select Account Settings. The Manage Account screen is displayed.
4. If desired, click the Regenerate API Key button to reset your API key.

   

   {width=”6.5in” height=”1.1049989063867016in”}
5. In the API Key section, click the Reveal button.
6. Take note of the API key value for later use.

Connect Your Data Store

Step 1: Provide Credentials

Follow these steps to configure the connection:

1. Go to Data Stores > Data Store Inventory.

2. Click CONNECT A DATA STORE in the upper right.

   Tip: Alternatively, if the data store was already found by auto-discovery, go to the Discovered tab and click Connect in the Actions column.

   

3. In the Connect a Data Store window, click the data store icon you wish to connect.

4. In the Provide Credentials section, complete the following fields:

Step 2: Scanning Infrastructure

1. Click Next.
2. When the Select Capabilities tab appears, complete the following fields:
   • Assign a Data Owner (Optional): Select one or more users responsible for this data store.
   • Which databases should Netskope DSPM scan?: Select the specific data stores and schemas to monitor, if applicable.
   • Features: Select the features you want to enable.

• Configuration: enter the API key value you created in the Generate Heroku API Key step above. Otherwise, deselect the checkbox if you don’t wish to utilize Configuration Analysis.

Step 3: Review and Save

1. Click Save.
   • When the Review tab appears, the system validates your configuration. If there are any issues, follow the on-screen instructions to fix them.
2. Click Save to finalize the connection.