Overview
Netskope One DSPM supports scanning GCP BigQuery Data Stores. Follow these instructions to setup your BigQuery datastore and configure its connection to Netskope One DSPM.
These instructions are for connecting an individual GCP BigQuery Data Store. To learn more about onboarding many GCP BigQuery Data Stores at once, please visit our Connecting to multiple GCP BigQuery Data Stores article.
Prerequisites
Before attempting to connect a GCP Data Store, be sure you have completed all the steps and the setup needed to onboard GCP projects.
Connect Your Data Store
Excerpt: Connect Your Data Store 1
Log into the Netskope One DSPM platform. Navigate to the Data Stores > Data Store Invento
- Log into the Netskope One DSPM platform.
- Navigate to Data Stores → Data Store Inventory.
- Use the Discovered tab, then click the CONNECT button under Actions to connect a discovered data store. You'll immediately see the Credentials tab with some fields automatically populated.
- Alternately, click the CONNECT A DATA STORE button in the upper right to select a data store type and go through the data store connection UI manually.
- The Connect a Data Store modal is displayed, starting with the SELECT DATA STORE tab.
- Click on the icon for the Data Store Type you wish to connect. The modal will auto-navigate you to the next tab.
- On the PROVIDE CREDENTIALS tab, complete the following fields:
| Field | Value |
|---|---|
| Select GCP Account |
Select one of the GCP Accounts defined within the Infrastructure Section screen. The field will default if there is just one GCP Account configured |
| Data Store Identifier | Provide a friendly name to describe this Data Store. This value is displayed in other Netskope One DSPM screens such as Policy Management and Classification Management. |
| Project ID | Provide your unique ID of the Google Cloud Project in which this Data Store being Onboarded resides. |
| Authentication Method |
Select the type of Authentication based on your Configuration
|
|
Scan Frequency |
Controls how often your Data Store is reviewed for changes, Netskope One DSPM’s recommended frequency is defaulted, which you can override if (desired). |
| Sidecar Pool | Excerpt: Connect Your Data Store: Credentials: Sidecar PoolIf you will use sidecars to monitor this data store, select a sidecar pool with network visibility to said data store. This field is displayed when there is at least one defined sidecar pool. To learn more, please visit our Sidecar Administration article. |
Note that the BigQuery API must be enabled for each GCP Project for which you'll connect a BigQuery data store.
Excerpt: Connect Your Data Store 2
Click the NEXT button, which will navigate you to the next tab. On the SELECT CAP
- Click the NEXT button. The SELECT CAPABILITIES tab is displayed.
- Complete the following fields:
- Assign a Data Owner (optional): define one or more Platform Users responsible for this Data Store and its data sets.
- Which databases should Netskope One DSPM scan?: utilize the field’s picklist control to select which databases & schemas should be monitored by the Netskope One DSPM application. By default, all databases & schemas are selected.
- Features: Netskope One DSPM’s recommended feature selections will be defaulted, which you can override if desired. Some features are always-on, some are not applicable (with disabled toggles), while others may request additional configurations.
| Capability | Supported for GCP BigQuery |
|---|---|
| Discovery |
Yes (always-on) |
| Privilege Analysis | No |
| Shadow Data Analysis | Yes |
| Classification |
Yes |
| Data In Use Monitoring |
Yes (BigQuery automatically applies correct configurations by default) |
| Automation |
Yes (always-on) |
Excerpt: Connect Your Data Store 3
Click the NEXT button, which will navigate you to the next tab. On the REVIEW tab
- Click the SAVE button, which will navigate you to the next tab.
- On the REVIEW tab, Netskope One DSPM will validate your credentials and capability selections. In the event of any issues, follow the on-screen instructions to remediate the displayed warnings or errors.
- Click the SAVE button to finalize your connection.