Searching for sensitive data in a bucket

1. In the management console, select a folder.

2. Navigate to Object Storage.

3. Click the name of the bucket you want to create a scan for.

4. Go to the Security → Sensitive data search tab.

5. Click New scan.

   Note

   If access to the bucket is controlled by a policy, allow access to Security Deck IP addresses in the bucket policy settings. For a list of addresses, see Public IP address ranges.

6. Under Sensitive data search, select the data categories to scan for. You can select all the available categories at once or any combination of them.

7. Optionally, under Include files into the scope, specify the object keys or prefixes to include in the scan. By default, the scan targets all supported file formats.

   Note

   Currently, you cannot scan objects encrypted with a KMS key.

8. Click Create scan.

The scan will start automatically. To repeat the scan, click Repeat scan.

1. In the management console, select a folder.

2. Navigate to Object Storage.

3. Click the name of the bucket in question.

4. Go to the Security → Sensitive data search tab.

5. Sensitive data found during the scan, if any, will be displayed on the Results tab. The information about each detected object is presented in the following columns:

   • Data type: Search category of the data, e.g., FULL-NAME-RU-ML: Full name.
   • Found occurrence: Sensitive data found.
   • Object: Path to the file the data was found in.

1. In the management console, select a folder.
2. Navigate to Object Storage.
3. Click the name of the bucket in question.
4. Navigate to the Security → Sensitive data search tab.
5. Click More → Download results.
6. In the window that opens, specify how to display names, contact information, and other personal data, then click Download file.

1. In the management console, select a folder.

2. Navigate to Object Storage.

3. Click the name of the bucket in question.

4. Navigate to the Security → Sensitive data search tab.

5. Click More → Export to bucket.

6. In the window that opens, set the export settings:

   • In the Bucket field, select the bucket to save the results to.
   • In the Path to bucket field, set the prefix of the object to save the results to.
   • In the File name field, specify the name of the file to save the results to. The file will automatically get the .csv extension.
   • In the Service account field, select the service account with the storage.uploader role for the selected bucket and kms.keys.encrypter for the encryption key, if the bucket is encrypted.
   • Under Display sensitive data, specify how to display names, contact information, and other personal data.
   • Click Export to export the parameter check results.

1. In the management console, select a folder.
2. Navigate to Object Storage.
3. Click the name of the bucket in question.
4. Navigate to Security → Sensitive data search → Messages and errors.