Welcome to the Netskope One DSPM Knowledge Base

You will find your answers here!

    Sorry, we didn't find any relevant articles for you.

    Send us your queries using the form below and we will get back to you with a solution.

    Connecting to Google Cloud Storage Data Stores

    Table of Contents

    Overview Configure GCS Permissions Retrieve Connection Information Connect Your Data Store Supported File Types for Unstructured Data Store Scanning

    Overview

    Netskope One DSPM enables you to scan unstructured data within Google Cloud Storage (GCS) data stores, supporting Discovery, Classification, and Automation to assess security risks associated with your unstructured data accurately. Follow the instructions below to configure and connect your GCS data store. 

    Configure GCS Permissions

    The following permissions are required within your custom GCP IAM role to enable scanning of GCS data stores.

    storage.buckets.get
storage.buckets.getIamPolicy
storage.buckets.list
storage.buckets.listEffectiveTags
storage.buckets.listTagBindings
storage.multipartUploads.list
storage.multipartUploads.listParts
storage.objects.get
storage.objects.list

    Read more about enabling these permissions in Onboarding GCP Projects Manually.

    Retrieve Connection Information

    Netskope One DSPM will require additional information to communicate with your GCS data store. Please follow the steps below to identify the connection values for later use within Netskope One DSPM.

    1. Log into Google Cloud console.
    2. From the left side navigation, click Cloud Storage → Buckets
    3. Note the bucket name to be scanned.
    Highlight Color Corresponding Netskope One DSPM Value Example
    Yellow Bucket Name

    Connect Your Data Store

    Excerpt: Connect Your Data Store 1

    Log into the Netskope One DSPM platform. Navigate to the Data Stores > Data Store Invento

    1. Log into the Netskope One DSPM platform.
    2. Navigate to Data Stores → Data Store Inventory.
    3. Use the Discovered tab, then click the CONNECT button under Actions to connect a discovered data store. You'll immediately see the Credentials tab with some fields automatically populated.
    4. Alternately, click the CONNECT A DATA STORE button in the upper right to select a data store type and go through the data store connection UI manually.

    1. The Connect a Data Store modal is displayed, starting with the SELECT DATA STORE tab.
    2. Click on the icon for the Data Store Type you wish to connect. The modal will auto-navigate you to the next tab.
    3. On the PROVIDE CREDENTIALS tab, complete the following fields:
    Field Value
    Select GCP Account Select one of the GCP Accounts defined within the Infrastructure Connections screen. The field will default if there is just one GCP account configured.
    Data Store Identifier Friendly name to describe your data store. Your value is displayed in other Netskope One DSPM screens, such as Policy Management and Classification Management.
    Bucket Name Name of GCS bucket to be scanned. Obtain from your Google Cloud console as shown in Retrieve Connection Information section above.
    Sidecar Pool

    Excerpt: Connect Your Data Store: Credentials: Sidecar Pool

    If you will use sidecars to monitor this data store, select a sidecar pool with network visibility to said data store. This field is displayed when there is at least one defined sidecar pool.

    To learn more, please visit our Sidecar Administration article.
    Scan Frequency Controls how often your Data Store is reviewed for changes; Netskope One DSPM’s recommended frequency defaults, which you can override if (desired).

    Note that GCP IAM Role is used to authenticate this data store, which was configured during Infrastructure Onboarding.

     
    1. Click the NEXT button. The SELECT CAPABILITIES tab is displayed.
    1. Complete the following fields:
      1. Assign a Data Owner (optional): define one or more platform users responsible for this data store and its data sets.
      2. Features: Netskope One DSPM’s recommended feature selections will be defaulted, which you can override if desired. Some features are always-on and some are not applicable (with disabled toggles).
    Feature Supported for GCS?
    Discovery Yes (always-on)
    Privilege Analysis No
    Shadow Data Analysis Yes
    Classification Yes
    Data In-Use Monitoring No
    Automation Yes (always-on)
    1. Enabling Classification for GCS data stores triggers scanning and sampling files within the bucket at your specified sampling rate, defined as the percentage of files in the bucket that Netskope One DSPM receives per scan. 
      1. 1000 files maximum are retrieved per scan, regardless of sampling rate. Even at a 100% sample rate, 1000 files are sampled per scan, and the remaining unscanned files are covered in subsequent scans.
      2. All non-image file types greater than 1GB will not scan. Image files greater than 10MB will not scan.
      3.  Netskope One DSPM will only re-scan files in the GCS bucket that have been modified since the last scan.
      4. You can optionally also include a regular expression to indicate sampling only specific file types.
    2. Click the SAVE button, which will navigate you to the next tab.
    3. On the REVIEW tab, Netskope One DSPM will validate your credentials and capability selections. In the event of any issues, follow the on-screen instructions to remediate the displayed warnings or errors.
    4. Click the SAVE button to finalize your connection.

    Supported File Types for Unstructured Data Store Scanning

    Excerpt: Supported File Types for Unstructured Data Store Scanning

    The below file types are currently supported for unstructured data classification:

    Image Files .png, .jpeg, .jpg
    Archive Files .zip, .tar, .tar.gz
    Plain Text Files .txt, .pem, .crt, .cer, .key, .p7b, .p7c
    Other Files

    .avro, .csv, .doc, .docx, .eml, .htm, .html, .js, .json, .jsonl, .parquet, .pdf, .ppt1,  .pptx1, .tsv, .xls, .xlsx, .xml, .yaml, .yml

    1 Text portions only

    If a scanned data store contains files without an identifiable file type, “Unknown” will display within the Classifiable File Types field.

     

     

    Was this article helpful?

    Still can't find what you are looking for?

    Contact Netskope Technical Support