Alibaba Cloud Connector

Overview

Used for OneTrust Data Discovery Scanners, the Alibaba Connector connects with Alibaba storage options (buckets) and can be used to scan file system information directly from those objects.

Pod Residency

storage-scanner

Connection Method

API

Supported Scan Actions

Scan Type

Description

Catalog

This will fetch the list of buckets and objects present in those buckets. It collects the Metadata also for these objects and send back to OneTrust app.

Catalog & Scan

This will fetch the list of buckets and object present in those buckets. We collect the metadata and then proceed with content extraction. It will return the personally identifiable information, data elements, and terms with the applied the classification labels.

Credential & System Permissions

Important:

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base and/or support resources.

Permissions

  • oss:Get*

  • oss:List*

JSON 
#ExamplePolicy

1{
2    "Statement": [
3        {
4            "Action": [
5                "oss:Get*",
6                "oss:List*"
7            ],
8            "Effect": "Allow",
9            "Resource": "*"
10        }
11    ],
12    "Version": "1"
13}

This connector supports access to a single account via API credential and all buckets in that account.

JSON 
#ExampleJSON

{
    "alibaba_access_key_id": "<your-access-key>",
    "alibaba_secret_access_key": "<your-secret-key>", 
    "ossEndpoint": "oss-<region>.<domain.com>"
}

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Limits

  • Max Number of Buckets

  • Max Number of Files per Bucket

  • Max Number of Files per Scan

Scope

  • Minimum File Size

  • Maximum File Size

  • Excluded file types regardless of any specified inclusion paths

Include/Exclude Paths

  • Bucket

  • Prefix

Collected Objects & Fields

Object

Field

Bucket

  • Name

  • Shared Access (Open Access OR if not Shared)

  • Size

  • Location (region)

Object (Folder/File)

  • Name

  • Shared Access (Open Access OR if not Shared)

  • Last Modified timestamp

  • Size

  • Content-type

  • ETag