Configuring an Ingested Data Detection Rule

Prerequisites

• Identification rules have been created. For details, see Defining Identification Rules.

Notes and Constraints

• In the table data migration in DataArts Migration (offline jobs) and sensitive data discovery in DataArts Security, only MRS Hive, GaussDB(DWS), DLI, and RDS for MySQL data sources are supported.
• Sensitive table data detection in DataArts Migration (offline jobs) has the following requirements on the table content format:
  • A maximum of 500 fields are allowed in a table.
  • For table fields in string format, sensitive information in the first 1,000 characters is detected. The excess part will be truncated.
• Only built-in and custom identification rules in regular expression format are supported. A maximum of 50 detection rules are supported.

Configuring an Identification Rule

1. On the DataArts Studio console, locate a workspace and click DataArts Security.
2. In the navigation pane on the left, choose Data Identification Rules. On the displayed page, click the Ingested Data Detection Rules tab.
3. On the Ingested Data Detection Rules page, click Configure Rule.
   Figure 1 Ingested Data Detection Rules page
   

4. In the displayed Rule Settings dialog box, select required identification rules and click Submit.
   Figure 2 Configuring rules
   

5. (Optional) If you want to apply an ingested data detection rule to real-time detection of sensitive table data in DataArts Migration (offline jobs), you need to configure a rule policy by setting the parameters listed in Table 1.
   Figure 3 Rule policy parameters
   

   Table 1 Rule policy parameters

   Parameter	Description
   Detect Sensitive Information in Jobs in Real Time	Whether to enable real-time detection of sensitive table data during table data migration in DataArts Migration (offline jobs).
   Sensitive Information Interception Policy	The following interception policies are available if sensitive information is detected in offline migration jobs in DataArts Migration: Strong interception: Jobs cannot be saved as long as sensitive information is detected. Week interception: Sensitive fields for which encryption and decryption have been configured or those that have been masked are not intercepted. No interception: Sensitive information is not intercepted.
   Sampling	Number of rows sampled during table field detection in an offline job in DataArts Migration. A maximum of 100 rows can be sampled.
   Synchronise	Click Synchronise to synchronize the rule policy to DataArts Migration (offline jobs). The rule policy takes effect only after it is synchronized to DataArts Migration (offline jobs).

Related Operations

• Deleting ingested data detection rules: On the Ingested Data Detection Rules page, locate a rule and click Delete in the Operation column. To delete multiple rules, select them and click Delete above the list.
  NOTE:

  The deletion operation cannot be undone. Exercise caution when performing this operation.