You can use Netskope’s DLP solution to check for compliance and protect sensitive data. The DLP profiles that enforce compliance and protect sensitive data consists of DLP rules that specify data identifiers. These data identifiers find content that should not be present in your IaaS environment. The following predefine rules and data identifiers can be used to create DLP profiles to monitor the data in your IaaS environment.
| Predefine Rule | Predefine Identifier | Description |
|---|---|---|
| Security – API Secret Keys |
| Checks for AWS, GitHub, and Facebook API keys. |
| Security – Passwords |
| Checks for common and secure passwords, and password related terms such as passwd, p/w, password. |
| Security – Private Key Blocks |
| Checks for private keys. |
You can setup DLP policies for AWS and GCP to perform retro scans and ongoing scans on your storage buckets. For detailed information refer to the following topics,
You can view the DLP incidents in your tenant under API-enabled Protection > IaaS > Overview > DLP Incidents. To learn more: View IaaS Overview.
For information on DLP Profiles and Rules, see the Data Loss Prevention documentation.