Inspection Tasks

Prerequisites

• Access to cloud assets has been authorized. For details, see Allowing or Disallowing Access to Cloud Assets.
• You have performed operations in Adding Unstructured OBS Data or Adding and Authorizing Database Assets.

Creating a Task

1. Log in to the DSC console.
2. Click in the upper left corner and select a region or project.
3. In the navigation pane on the left, choose Data Security Operations > Credential Leakage Detection.
4. On the Inspection Tasks tab page, click Create Task in the upper left corner.
5. On the Create Task page, set related parameters by referring to Table 1.
   Figure 1 Creating a task

   

   Table 1 Parameters for creating a task

   Parameter	Description
   Task Name	Customize a credential leakage scan task name. The value can contain 4 to 255 characters and must start with a letter. Only letters, digits, hyphens (-), and underscores (_) are allowed.
   Data Source	Type of data sources to be scanned. You can select multiple types. OBS: DSC scans for Huawei Cloud account credentials, including AKs, on Huawei Cloud OBS. For details about how to add OBS assets, see Adding Unstructured OBS Data. Database: DSC scans for Huawei Cloud account credentials, including AKs, in authorized databases. For details about how to authorize access to databases, see Adding and Authorizing Database Assets. Big Data: DSC scans for Huawei Cloud account credentials, including AKs, in authorized databases and indexes. For details about how to authorize access to databases and indexes, see Adding and Authorizing Big Data Assets. LTS: DSC scans for Huawei Cloud account credentials, including AKs, in connected LTS. For details about how to add LTS assets, see Adding a Log Stream.
   Credential Type	By default, Access Key, IAM account/user, and the Custom credential type are selected.
   Scan Mode	This parameter is available only when OBS is selected for Data Type. Incremental Scan: When you re-execute a task, only new files in the OBS bucket are scanned. Scan All: When you re-execute a task, all files in the OBS bucket are scanned.
   Scan Frequency	Set the execution policy of the credential scan task. Once: The task is executed once at a specified time or immediately. Daily: The task is executed at a fixed time every day. Weekly: The task is executed at a specified time every week. Monthly: The task is executed at a specified time every month.
   When to Execute	This parameter is displayed when Scan Frequency is set to Once. Now: Select this and click OK. The system immediately executes the credential scan task. As scheduled: The task will be executed at a specified time.
   Start Time	This parameter is displayed when Scan Frequency is set to Daily, Weekly, or Monthly. Select the execution time of the scan task. After the time is selected, the task is executed every day, every week, every month, or at the specified time.
   (Optional) Add Scan Scope	This parameter is displayed after you select a specific asset for Data Type. Click Add OBS Scan Scope or Add Database Scan Scope to specify the asset scan scope. If this parameter is not specified, all selected assets are scanned by default. For details, see Adding a Scan Scope.

6. Click OK. A message is displayed in the upper right corner, indicating that the task is created.

Adding a Scan Scope

By default, DSC scans all selected assets. This section describes how to add a scan scope.

1. Log in to the DSC console.
2. Click in the upper left corner and select a region or project.
3. In the navigation pane on the left, choose Data Security Operations > Credential Leakage Detection.
4. On the Inspection Tasks tab page, click Create Task in the upper left corner.
5. Select a data source type and assets to be scanned, and click OK.
6. In the lower left corner of the page, specify the scan scope. You can add multiple scan scopes. Table 2 describes the parameters.

   Table 2 Parameters for configuring the scan scope

   Asset Type	Parameter	Description
   OBS	Asset	Select the bucket to be scanned from the drop-down list. You can select multiple buckets.
   	Scan Scope	File prefix: For example, if you set this field to dsc_, all files whose names start with dsc_ will be scanned. You can specify only one file prefix. File suffix: Specify the file suffix, including the file type following the dot (.), for example, dsc_security.txt. The file suffix can be security.txt or .txt. Only the files that meet all filter criteria are scanned. You can specify only one file suffix. Directory: Scan all files in the specified directory. You can specify only one directory. Enter the file prefix/suffix or directory, and click Add as Inclusion Condition or Add as Exclude Condition. For example, after you select File prefix, enter dsc_, and click Add as Inclusion Condition, only files whose file name prefix is dsc_ are scanned. If you click Add as Exclusion Condition, only files whose prefixes are not dsc_ are scanned.
   	Scan Depth	Global Scan: If this parameter is selected, all data in the specified scope is scanned. Specify Scan Scope: Set Scan Depth. The value is an integer ranging from 1 to 10.
   Database	Asset	Select a database from the drop-down list. You can select multiple instances.
   	Scan Scope	Prefix: You can specify only one prefix. For example, after you set the prefix to dsc_ and click Add as Included Condition, only tables whose name prefixes are dsc_ are scanned. If you click Add as Exclusion Condition, only tables whose prefixes are not dsc_ are scanned. Suffix: You can specify only one suffix. The principle is the same as that of the prefix.

   Figure 2 Configuring the scan scope
   

Related Operations

• To edit and modify a task, locate it in the list and click Edit in the Operation column.
• To delete a task, locate it in the list and choose More > Delete in the Operation column. In the displayed dialog box, click OK.
  

  • To delete a scan task, stop it or wait until it is complete.
  • The deletion cannot be undone. Exercise caution.
• To stop a scan task, locate it in the list and choose More > Stop in the Operation column.