Data Security Center
Scans connected data stores, classifies sensitive data against rules and reports risky access.
- Provider
- alibabacloud
- Kind
- Policy engine
- Category
- Operations
- Official docs
- https://www.alibabacloud.com/help/en/dsc
- Also known as
- SDDP
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| capability | enum | data-discovery | classification | anomaly-detection | de-identification | no | — | inherited |
| effect | enum | audit | deny | modify | deploy-if-not-exists | no | — | ▸ audit |
| enforcementMode | enum | enforced | disabled | no | — | inherited |
| managed | boolean | — | no | false | ▸ true |
| policyCount | integer | — | no | — | inherited |
| remediation | boolean | — | no | false | ▸ false |
| scope | enum | resource | group | account | organization | no | — | ▸ account |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "data-security-center", component: "alibaba-data-security-center" }Cloud Configalibaba-cloud-configAmazon CodeGuru Revieweraws-codeguru-reviewerAWS Configaws-configAWS Control Toweraws-control-towerIAM Access Analyzeraws-iam-access-analyzerAWS Lake Formationaws-lake-formationAWS License Manageraws-license-managerAWS Organizationsaws-organizationsAWS Resource Access Manageraws-ramAmazon Verified Permissionsaws-verified-permissionsMicrosoft Entra Conditional Accessazure-conditional-accessAzure Policyazure-policyMicrosoft Entra Privileged Identity Managementazure-privileged-identity-managementCloudflare Data Loss Preventioncloudflare-dlpCalypsoAIcalypsoaiCerboscerbosOPA GatekeepergatekeeperGuardrails AIguardrails-aiHiddenLayer AI Security PlatformhiddenlayerKubeArmorkubearmorKubewardenkubewardenKyvernokyvernoLakera Guardlakera-guardLLM Guardllm-guardNeMo Guardrailsnemo-guardrailsOpen Policy AgentopaPermit.iopermit-ioGeneric policy enginepolicy-enginePrompt Securityprompt-securityProtect AIprotect-aiRebuffrebuffRobust Intelligencerobust-intelligenceSonarQube ServersonarqubeDigitalOcean CSPMdigitalocean-cspmAccess Context Managergoogle-access-context-managerAssured Workloadsgoogle-assured-workloadsBinary Authorizationgoogle-binary-authorizationIdentity and Access Managementgoogle-cloud-iamFirebase App Checkgoogle-firebase-app-checkModel Armorgoogle-model-armor
and 16 more → Policy engine page# yaml-language-server: $schema=../../schema/component.schema.json # Data Security Center (formerly Sensitive Data Discovery and Protection): scans connected data # stores, classifies the sensitive data it finds against rules, and reports risky access and # unprotected data ("What is Data Security Center"). It reports and classifies; it does not block. schemaVersion: "1" type: "component" id: "alibaba-data-security-center" kind: "policy-engine" provider: "alibabacloud" docs: "https://www.alibabacloud.com/help/en/dsc" aliases: ["SDDP"] defaults: managed: true effect: "audit" scope: "account" remediation: false properties: capability: type: "enum" values: ["data-discovery", "classification", "anomaly-detection", "de-identification"]