Posture Control (DSPM)
Configuring Scan Settings for AWS Virtual Machine
You can configure the scan settings to scan the Amazon Web Services (AWS) virtual machines. DSPM scans the EC2 instances for any sensitive data. The scan results are displayed on the Data Inventory page.
You can configure the scan settings after onboarding the AWS accounts. To learn more, see About Cloud Accounts.
To scan the AWS virtual machines:
- 1. Select the cloud and resource type.
- Go to Administration > Scan Settings.
Select the Scan Settings tab.
If you are configuring the scan settings for the first time, the following page appears:
- Click Configure Scan Settings.
For subsequent configurations, click Add New on the Scan Settings page.
On the Select Cloud Type and Resource Type page:
- For Cloud Type, select AWS.
- For Resource Type, select Virtual Machine.
- Click Next.
- 2. Select the accounts that must be scanned.
- On the Select the Resources to Scan page, select one of the following options:
Scan All Accounts: Scans all the virtual machines across all onboarded accounts.
Exclude Accounts from the Scan: Exclude specific accounts from the scan. When you select this option, the list of accounts is displayed. Select the checkbox for the accounts that must be excluded from the scan.
Scan Specific Accounts: Scan only specific accounts. When you select this option, the list of accounts is displayed. Select the checkbox for the accounts that must be scanned.
Scan Specific Instances: Specify the virtual machines that must be scanned. When you select this option, enter the key-value pairs for the instances. You can add multiple key-value pairs.
Enable Malware Scanning: Enable this option if the resources must be scanned for malware. This option is disabled by default.
- Click Next.
If you chose Scan All Accounts, Exclude Accounts from the Scan, or Scan Specific Accounts, you can optionally exclude some VMs from the scan. Enter the instance IDs of the VMs you want to exclude from the scan.
Exclude Operating System Directories Files from Scanning is enabled by default. To include the OS directories in the scan, disable this option.
The following directories are excluded from the scan:
- Click Next.
- On the Select the Resources to Scan page, select one of the following options:
- 3. Set up the scan schedule.
On the Scan Schedule page, select the scan frequency:
- Daily: Scan the data daily.
- Weekly: Scan the data once a week. Select the day from the drop-down menu.
- Monthly: Scan the data once a month.
- Click Next.
- 4. Select the scan scope.
On the Scan Scope page, choose a scan scope from the drop-down menu to set up your scan settings.
To learn more about configuring and creating a scan scope, see Configuring Scan Scope.
- Click Next.
- 5. Review and complete the configuration.Close
