检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
(Optional) Enable Huawei Cloud OBS or RDS to protect data in your OBS self-built buckets. If OBS or RDS was enabled, skip to 2. If OBS or RDS was not enabled, enable it and then go to 2. For details about how to enable OBS, see OBS User Guide.
On the OBS console, choose Buckets to view the used capacity of the bucket. Select an OBS volume that is greater than or equal to the used capacity of the OBS bucket.
Table 1 Asset types and data source types supported by the asset center Asset Type Data Source Type Operation OBS OBS Adding an OBS Asset Database RDS Authorizing Access to a Database Asset DWS GaussDB Self-built databases Adding and Authorizing Database Assets Big Data Elasticsearch
OBS Expansion Package One OBS expansion package offers 1 TB (1024 GB) of OBS storage. Pseudo-line Insert pseudo-line data in the original data format into the database. For details, see Injecting Watermarks to Databases.
An OBS expansion package offers 1 TB (1,024 GB) of OBS storage. Procedure Log in to the DSC console. Click in the upper left corner and select a region or project. If you are a first-time user, click Buy DSC.
For detailed instructions on extracting watermarks from either cloud documents (in an OBS bucket) or local documents, refer to the "Extracting Watermarks" section. Prerequisites OBS asset access permissions are granted.
OBS Enter the OBS address, OBS bucket, and backup file path to remotely download the backup file. (AK and SK have been configured in the instance.) DSC delivers the OBS backup configurations and AK/SK configurations. Click Confirm.
Currently, only OBS objects are supported. The format is obs://bucket/object, where bucket indicates the name of the OBS bucket in the same region as the current project, and object indicates the full path name of the object. For example, obs://hwbucket/hwinfo/hw.doc.
None Introduction Introduction 03:39 Introduction to Data Security Center Operation Guide Adding/Extracting Data Watermarks to/from OBS Files 04:45 Adding/Extracting Data Watermarks to/from OBS Files Identify and mask sensitive data in cloud databases 06:52 Identify and mask sensitive
OBS Data Security Protection Sensitive data encompasses personal information, passwords, cryptographic keys, confidential images, and other high-value assets. This type of data is commonly stored in various formats within OBS buckets.
Create a custom policy with the same action for denying querying the OBS asset list, and assign both policies to the group the user belongs to. Then, the user can perform all operations on DSC except querying the OBS asset list.
Currently, only OBS objects are supported. The format is obs://bucket/object, where bucket indicates the name of the OBS bucket in the same region as the current project, and object indicates the full path name of the object.
Detailed instructions on how to extract watermarks from files stored in OBS buckets or from local files are provided in this section. Prerequisites OBS asset access permissions are granted. For details, see Allowing or Disallowing Access to Cloud Assets.
Figure 1 Instance details Click the Data Type tab, choose OBS under UNSTRUCTURED DATA from the navigation pane. Under OBS Buckets, you can view the OBS databases, sensitive files, and sensitivity levels.
masking OBS bucket files (text and images (face and license plate)) Parent Topic: Data Masking
OBS assets Number of OBS assets. Database assets Number of database assets. Big data asset Number of big data assets. Operation Click Go to View to go to the Asset Center page and view and manage related assets. Parent Topic: Multi-Account Management
Table 1 Identification duration Data Source Data Volume Scan Mode Duration (Minutes) RDS 1,000 tables Quick scan 5 CSS 10 million documents Quick scan 15 OBS 100 MB Quick scan 1 OBS 100 MB Full scan 15 Data Masking Duration DSC uses preset and customized masking algorithms to mask
OBS: After DSC is authorized to access your Huawei Cloud OBS asset, DSC will identify the sensitive data in it. For details about how to add OBS assets, see Adding an OBS Asset. Database: DSC will identify the sensitive data in the authorized databases.
A data tracker records details of user operations on data in OBS buckets. It records data traces reported by OBS, detailing user operations on data in OBS buckets, including uploads and downloads.
(Optional) OBS expansion package Billed based on the number of purchased packages. Required duration Billed on a yearly or monthly basis. Pay-Per-Use APIs (data masking and watermarking) APIs are included only in the professional edition.
