Skip to main content

Privacera Platform master publication

Tags

:

Tags are an important part of Privacera Discovery and access control. In addition to security policies for resources and roles, you can create policies based on tags. Using tag-based policies, you can manage access to sensitive data regardless of where the data is stored.

Privacera Discovery scans data sources and tags all sensitive information across the enterprise. Example tags include PERSON_NAME, PII, ADDR, or EMAIL_ADDR. A dataset attribute, such as a column, table, or file, can be tagged with metadata information that can be used to classify the data asset. For example, a column titled "Email" or "Phone_Number" can be tagged as PII.

Tags enrich existing information about your data. Data administrators can create access control policies based on the tags created by Privacera Discovery. You can view your tags from the Tags Information page.

If you have defined rules, the generation of tags depends on the order of the rules. For more information, see Processing order of scan techniques and Reorder structured rules.

Add Tags

You can add tags in Privacera Discovery from the Tags Information page.

To add a tag, folow these steps:

  1. From the Privacera home page, expand the Discovery menu and select Tags Information.

  2. Click the + icon.

    The Add Tag dialog is displayed.

  3. In the Tag Name field, enter a name for the tag.

  4. In the Description field, enter a description of the tag (optional).

  5. Click Save.

    The tag is added.

Edit Tag Descriptions

You can edit the descriptions of tags in Privacera Discovery from the Tags Information page.

Note

You cannot change a tag name after the tag is created.

To edit the description of a tag, follow these steps:

  1. In the Tags Information page, select the tag you want to edit from the Tags list and click Edit.

    The Edit Tag dialog is displayed.

  2. Update the Description field.

  3. Click Save.

    The tag is updated.

Delete Tags

You can delete tags in Privacera Discovery from the Tags Information page.

To delete a tag, follow these steps:

  1. In the Tags Information page, select the tag you want to edit from the Tags list and click Delete.

    The following message is displayed: “Are you sure you want to delete this tag?”

  2. Click Yes to delete the tag or No to return to the Tags Information page.

Search for Tags

You can search for tags in Privacera Discovery from the Tags Information page.

To search for a tag, enter the name of the tag into the Search Tag field.

Add, Edit, or Delete Tag Attributes

The Attributes section displays a list of attributes associated with a tag. You can search the list of attributes using the search box. The Attributes section also displays the total number of records with this tag.

To add an attribute for a specific tag, follow these steps:

  1. In the Tags Information page, select the tag from the Tags list.

  2. Click Add Attribute

    The Add Attribute dialog displays.

  3. In the Name field, enter the name of the attribute.

  4. In the Value field, enter the value of the attribute.

  5. Click Save.

    The attribute is added to the selected tag.

Note

You can delete or edit the attribute from the Actions column.

Export Tags

To export the tag file in JSON format, follow these steps:

  1. Click Export.

  2. Check the checkbox of the required tag and click the Export. You can select multiple tags.

    The tag file is exported.

Import Tags

To import a tag file in JSON format, follow these steps:

  1. Click the Import icon.

    The Import dialog displays.

  2. Select the JSON file you want to export.

  3. Click Save.

    The tag file is imported.

Fetch AWS S3 Tags

Privacera Discovery allows you to fetch AWS S3 tags. There are two types of tags that can be fetched:

  • Object Tags: Tags associated with the AWS S3 object or files in buckets.

  • Bucket Tags: Tags associated with the S3 bucket.

To fetch AWS S3 tags, follow these steps:

  1. Navigate to Discovery > Tags Information and create a tag named AWS_S3_TAG.

  2. Navigate to Settings > Data Source Registration and add or update the application properties as below:

    1. Set "Fetch S3 Object Tags": true

    2. Set "Fetch S3 Bucket Tags": true

      Note

      By default these properties are disabled and set to false.

  3. Go to Data Inventory > Classifications and click AWS_S3_TAG under the Tag column, then click on View attributes link.

  4. Click View attributes .

    AWS S3 tags will be displayed in the Data Info grid.

Note

  • If the AWS_S3_TAG tag is not created, then AWS S3 tags will not be fetched and the tag will not be displayed in Classification page.

  • If both the Object and Bucket tags are enabled and have a common tag, then the Object tag will override the Bucket tag. For example: If the Bucket tag is owner=user1 and the Object tag is owner=user2, then the AWS_S3_TAG tag will have owner=user2 as its attribute.

  • Tags fetched from AWS S3 will be added as attributes of the AWS_S3_TAG. This tag with attributes will be synced to Apache Ranger. Verify using the following URL: https://<EC2_Instance_IP>:6182/service/tags/tags.