Manage sensitive data

Billing

For more information, see Sensitive data protection pricing.

Function introduction

The sensitive data protection feature of DMS provides the following features:

• A sensitive data asset dashboard to centrally manage the distribution of sensitive data across your enterprise.

• Automated data scanning.

  • Customizable trigger cycles for data scans.

  • Automatic detection, classification, and sensitivity level assignment for sensitive data in your enterprise to ensure timely discovery and management.

• Sensitive data masking management.

  • Flexible management of masking algorithms for differentiated masking.

  • A staging environment to test masking and detection rules.

• Monitoring, auditing, and alerting for sensitive data to facilitate source tracing.

Procedure

1. Go to the Instances page. In the top navigation bar, select the region in which the RDS instance resides. Then, find the RDS instance and click the ID of the instance.

2. In the navigation pane on the left, click Data Security.

3. On the page that appears, click the SensitivDataManagement tab. If required, click Enable with One Click.

   Important

   If the Enable with One Click button is not displayed on the SensitivDataManagement page, the DMS service is not enabled. Click Log on to Database in the upper-right corner. After you log on, refresh the SensitivDataManagement page.

4. In the Enable Sensitive Data Protection window, review the billing details for sensitive data protection, and then click Enable.

5. After the page is refreshed, click Account Authorization.

6. On the Authorization page, enter the Database Account and Database Password for the target instance, and then click Authorize.

   After you enable the sensitive data management feature, you can view information about the databases in the current instance and the scan results for sensitive fields. Based on the scan results, click Go to DMS to Use Sensitive Data Protection to go to the DMS console and manage sensitive data. For more information, see Manage sensitive data.

Page overview

• Metadata summary: Displays information about the databases in the instance, such as the Number of databases, Number of scanned tables, Number of scanned fields, and Number of sensitive fields.

• Sensitive fields - Distribution by regulation: Displays the regulations or policies that apply to the sensitive fields in the database, and the number and distribution of these fields.

• Sensitive fields - Distribution by data type: Displays the distribution of sensitive fields in the database by data type. A data type is a classification of data based on its semantics. The default classifications include the following:

  • Level 1 category: Personal Information, Enterprise Information, Location Information, and more.

  • Level 2 category: Phone Number, Email Address, Bank Card, and more.

  Note

  You can create custom data classifications. For more information, see Manage sensitive data detection rules.

• Sensitive data summary: Displays detailed information about sensitive data from different perspectives (Database view, Table view, and Field view). This information includes:

  • The names of the database and table that contain sensitive information.

  • The sensitivity level of the information. For more information about sensitivity levels, see Terms.

  • The regulations and data types associated with sensitive information.