
vShield API Programming Guide
90 VMware, Inc.
Defining a Data Security Policy
Inordertodetectsensitivedatainyourenvironment,youmustcreateadatasecuritypolicy.Youmustbea
SecurityAdministratortocreatepolicies.
Todefineapolicy,youmustspecifythefollowing:
Regulations
AregulationisadataprivacylawforprotectingPCI(PaymentCardIndustry),PHI(ProtectedHealth
Information)andPII(PersonallyIdentifiableInformation)information.Youcanselecttheregulationsthat
yourcompanyneedstocomplyto.Whenyourunascan,vShieldDataSecurityidentifiesdatathat
violatestheregulationsin
yourpolicy,andishencesensitiveforyourorganization.
P articipatingareas
Bydefault,yourentirevCenterinventoryisscanned.Toscanasubsetofyourinventory,youcanspecify
thesecuritygroupsthatyouwanttoincludeorexclude.
Filefilters
Youcancreatefilterstolimitthedatabeingscannedandexcludethefiletypesunlikelytocontain
sensitivedatafromthescan.
InthedatasecurityAPIs,dlpinthepathnamestandsfordatalossprevention(DLP).
Query Regulations
Youcanretrievethelistofavailableregulationsforapolicy.TheoutputincludesregulationIDsandthe
embeddedclassificationsforeachregulation.
Example 8-1. Get all SDD policy regulations
Request:
GET https://<vsm-ip>/api/2.0/dlp/regulation
Response:
<set>
<Regulation>
<id>66</id>
<name>California AB-1298</name>
<description>Identifies documents and transmissions that contain protected health
information (ePHI) and personally identifiable information (PII) as
regulated by California AB-1298 (Civil Code 56, 1785 and 1798)...
<classifications>
<Classification>
<id>10</id>
<name>Credit Card Track Data</name>
<providerName>Credit Card Track Data</providerName>
<description>Credit Card Track Data</description>
<customizable>false</customizable>
</Classification>
...
Enable a Regulation
YoucanenableoneormoreregulationsbyputtingtheregulationIDsintothepolicy.Youcangetthe
appropriateregulationIDsfromtheoutputoftheretrieveregulationsAPI(seeExample 8‐1).Intheexample
requestbody,regulation66isCaliforniaAB‐1298,andregulations67and68originate
elsewhere.
Regulation ID
Classification ID
Komentáře k této Příručce