Posture Control (DSPM)
Configuring Scan Settings for GCP Database
You can configure the scan settings to scan the Google Cloud Platform (GCP) databases such as SQL, MySQL and PostgreSQL. DSPM scans the database instances for any sensitive data. The scan results are displayed on the Data Inventory page.
You can configure the scan settings after onboarding the GCP organization. To learn more, see About Cloud Accounts.
To scan the GCP databases:
- 1. Select the cloud and resource type.
- Go to Administration > Scan Settings.
Select the Scan Settings tab.
If you are configuring the scan settings for the first time, the following page appears:
- Click Configure Scan Settings.
For subsequent configurations, click Add Scan Settings on the Scan Settings page.
On the Select Cloud and Resource Type page:
- For Cloud Type, select Google Cloud.
- For Resource Type, select Database
- Click Next.
- 2. Select the projects that must be scanned.
On the Select Resources to Scan page, choose one of the following options:
Scan All Projects: Scans all the supported databases across all onboarded projects.
Exclude Projects from the Scan: Exclude specific projects from the scan. When you select this option, the list of projects is displayed. Select the checkbox for the projects that must be excluded from the scan.
Scan Specific Projects: Scan only specific projects. When you select this option, the list of projects is displayed. Select the checkbox for the projects that must be scanned.
Scan Specific Database Instances or Clusters: Specify the instances or clusters that must be scanned. When you select this option, enter the key-value pairs for the instance tags. You can add multiple key-value pairs.
- Click Next.
If you chose Scan All Projects, you can optionally exclude specific database servers from the scan.
- Click Next.
- 3. Select the scan type.
On the Scan Type page, you can choose to perform one of the following scans:
- Data Sampling Scan: Scan a sample of recent data in the database.
- Full Scan: A complete scan of all databases across all onboarded projects.
DSPM cannot detect files that are deleted in the GCP console.
- Click Next.
- 4. Set up the scan schedule.
On the Scan Schedule page, select the scan frequency:
- Daily: Scan the data daily.
- Weekly: Scan the data once a week. Select the day from the drop-down menu.
- Monthly: Scan the data once a month.
- Click Next.
- 5. Select the scan scope.
On the Scan Scope page, choose a scan scope from the drop-down menu to set up your scan settings.
To learn more about configuring and creating a scan scope, see Configuring Scan Scope.
- Click Next.
- 6. Review and complete the configuration.Close
