- What's New
- Function Overview
- Service Overview
- Billing
- Getting Started
-
User Guide
- Service Provisioning
- Allowing or Disallowing Access to Cloud Assets
- Asset Map
- Asset Management
- Sensitive Data Identification
- Policy Center
- Data Asset Protection
- Data Security Operations
- Alarm Notifications
- Multi-Account Management
- Permissions Management
- Key DSC Operations
- Best Practices
-
API Reference
- Before You Start
- Calling APIs
-
API Description
- Data Watermarking
- Resource Management
- Dynamic Data Masking
- Alarm Notifications
-
Image Watermarking
- Injecting Invisible Watermarks into Images
- Extracting Invisible Text Watermarks
- Extracting Invisible Watermarks from Images
- Injecting Invisible Watermarks into Images (Image Addresses)
- Extracting Dark Watermarks from Images (Image Addresses)
- Extracting Invisible Image Watermarks from Images (Image Addresses)
- Asset Management
- Document Watermarking
-
Sensitive Data Discovery
- Querying the Identification Task List
- Querying the Result of an Identification Task
- Viewing the Rule List
- Creating a Sensitive Data Scanning Rule
- Modifying a Sensitive Data Scanning Rule
- Deleting a Sensitive Data Scanning Rule
- Querying Sensitive Data Scanning Rule Groups
- Creating a Sensitive Data Scanning Rule Group
- Deleting a Sensitive Data Scanning Rule Group
- Creating a Sensitive Data Scanning Task
- Deleting a Sensitive Data Scanning Task
- Static Data Masking
- API Call Records
- Appendixes
- SDK Reference
-
FAQs
- Product Consulting
- Regions and AZs
- Asset Authorization
-
Sensitive Data Identification and Masking
- What Services Can Use DSC to Scan for Sensitive Data?
- How Long Does It Take for DSC to Identify and Mask Sensitive Data?
- What Are the Built-in Identification Rules of DSC?
- What Are the Identification Rules in the Built-in Identification Template of DSC?
- Does Data Masking Affect My Raw Data?
- Does DSC Have Specific Requirements on the Character Set for Which Sensitive Data Is to Be Identified and Masked?
- Why Cannot I Find a Table in an Existing Database When Creating a Database Data Masking Task?
- Data Watermarking
- Data Usage Audit
- Videos
-
More Documents
-
User Guide (ME-Abu Dhabi Region)
- Service Overview
- Service Provisioning
- Assets
- Overview
- Sensitive Data Identification
- Data Masking
- Data Watermarking
- Alarm Notifications
- Permissions Management
-
FAQs
- Product Consulting
- Adding Data Assets
-
Sensitive Data Identification and Masking
- What Services Can Use DSC to Scan for Sensitive Data?
- How Long Does It Take for DSC to Identify and Mask Sensitive Data?
- Which Types of Sensitive Data Can Be Identified by DSC?
- Does Data Masking Affect My Raw Data?
- Does DSC Have Specific Requirements on the Character Set for Which Sensitive Data Is to Be Identified and Masked?
- How Do I Add Multiple Identification Rule Groups?
- Data Watermarking
- Change History
-
API Reference (ME-Abu Dhabi Region)
- Before You Start
- Calling APIs
-
API Description
- Data Watermarking
- Resource Management
- Dynamic Data Masking
- Alarm Notifications
-
Image Watermarking
- Injecting Invisible Watermarks into Images
- Extracting Invisible Text Watermarks
- Extracting Invisible Watermarks from Images
- Injecting Invisible Watermarks into Images (Image Addresses)
- Extracting Dark Watermarks from Images (Image Addresses)
- Extracting Invisible Image Watermarks from Images (Image Addresses)
- Asset Management
- Document Watermarking
-
Sensitive Data Discovery
- Querying the Identification Task List
- Querying the Result of an Identification Task
- Viewing the Rule List
- Creating a Sensitive Data Scanning Rule
- Modifying a Sensitive Data Scanning Rule
- Deleting a Sensitive Data Scanning Rule
- Querying Sensitive Data Scanning Rule Groups
- Creating a Sensitive Data Scanning Rule Group
- Deleting a Sensitive Data Scanning Rule Group
- Creating a Sensitive Data Scanning Task
- Querying the Database Lineage Graph
- Querying the Table Lineage Graph in Pages
- Querying Data Linage Graph at the Column Level
- Querying the OBS Bucket Lineage Graph
- Querying the OBS File Linage Graph in Pages
- Static Data Masking
- API Call Records
- Appendixes
- Change History
-
User Guide (ME-Abu Dhabi Region)
- General Reference
Show all
Copied.
Agency Policies Obtained After the Access To Assets Is Allowed
After the access to cloud resources is allowed, DSC can access your OBS buckets, databases, big data assets, and asset map. Table 1 describes the agency policies obtained after the access is allowed.
Asset |
Policy |
Scope |
Remarks |
---|---|---|---|
OBS |
OBS Administrator |
Global |
Used to configure OBS logs, obtain the OBS bucket list, and download items form OBS. |
EVS ReadOnlyAccess |
Regional |
Used to obtain the EVS disk list. |
|
OBS Administrator |
Global |
Used to obtain the logs delivered by OBS. |
|
Database |
ECS ReadOnlyAccess |
Regional |
Used to obtain the list of ECSs where databases are built. |
RDS ReadOnlyAccess |
Regional |
Used to obtain the RDS database list and related information. |
|
DWS ReadOnlyAccess |
Regional |
Used to obtain the DWS instance list. |
|
VPC FullAccess |
Regional |
Used to establish network connection and create VPC ports and security group rules |
|
KMS CMKFullAccess |
Regional |
Used to perform encryption using KMS in data masking. |
|
GaussDB ReadOnlyAccess |
Regional |
Used to obtain the GaussDB list. |
|
Big Data |
ECS ReadOnlyAccess |
Regional |
Used to obtain the list of ECSs where big data sources reside. |
CSS ReadOnlyAccess |
Regional |
Used to obtain the CSS data cluster list and data indexes. |
|
DLI Service User |
Regional |
Used to obtain the DLI queue and database. |
|
VPC FullAccess |
Regional |
Used to establish network connection and create VPC ports and security group rules. |
|
KMS CMKFullAccess |
Regional |
Used to perform encryption using KMS in data masking. |
|
MRS |
MRS CommonOperations |
Regional |
Used for cluster query and task creation. |
Asset Map |
Tenant Guest |
Regional |
Used to obtain the list of cloud services used for data storage and processing. |
OBS Administrator |
Global |
Used to configure OBS logs, obtain the OBS bucket list, and download items form OBS. |
|
EVS ReadOnlyAccess |
Regional |
Used to obtain the EVS disk list. |
|
OBS Administrator |
Global |
Used for OBS to deliver logs. |
|
LTS |
LTS ReadOnlyAccess |
Region |
Used to read LTS log groups or log streams. |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot