Major New Features
De-Identification for Structured Data
DSPM’s data de-identification (DID) feature for structured data stores is now generally-available. For Oracle and Microsoft SQL Server data stores, data security administrators can now:
- Configure and manage de-identification rules in association with pre-defined Entity Data Types (EDTs)
- With either the UI or Open API, take bulk de-identification actions on individual columns
- Report on corrected violation counts and logged activity, and export results to CSV for de-identification tracking activities within the business
Support for de-identification of unstructured data is planned for an upcoming release.
Ideal Onboarding Experience for Standalone Sidecars
As part of the ongoing improvements to DSPM onboarding, standalone sidecars now share the same deployment user experience as single appliances. From the Sidecar Administration UI, you can now directly-access infrastructure-as-code files for deploying standalone sidecar instances and/or containers, along with images for DLP appliances. This reduces deployment friction by eliminating the need to find download links within our documentation, and it allows customers to reach first value faster.
Improvements and Updates
Single Appliance Enhancements
Customers deploying the single appliance on AWS no longer need to run an additional CloudFormation template to grant permissions for IAM-based data stores, as the required permissions are now provisioned as part of the standard deployment.
In addition, the single appliance sidecar also now supports explicit proxy configuration, and a fix resolves an initialization failure affecting single appliance deployment on Azure.
Streamlined EBS/EFS Onboarding
In the AWS infrastructure onboarding flow, the previously-unified capability is now presented as two distinct selections: “Scan EBS/EFS” and “Auto-Discover Unmanaged Data Stores”. This help clarify the choice for customers configuring AWS data store discovery, while preventing an issue where selecting the combination inadvertently enabling unmanaged data store discovery (possibly leading to undesired AWS usage costs).
Improved EFS/EBS Scan Reliability
We have increased timeouts and improved error messages for AWS EFS/EBS scan initialization, reducing spurious failures and giving clearer guidance when a scan can’t start.