Cassandra Connector

Overview

Used for OneTrust Data Discovery, the Apache Cassandra NoSQL connector works to search and scan data across many servers with robust support for clusters spanning multiple data centers.

Note:

This connector is currently under Public Preview. Contact OneTrust Support to request early access.

Pod Residency: nosql-scanner
Connection Method: Cassandra URL connection via RESTful API

Supported Scan Actions


Scan Type	Description
Catalog	This type can retrieve metadata from the list of keyspaces, tables, and items within Cassandra and send back to OneTrust app.
Catalog & Scan	This will fetch the list of buckets and objects present in those buckets. We don’t collect the Metadata in this Scan Type and directly go for content extraction and classification. It will return the PII-DEs and Terms as per the classification label identified.

Credentials and System Permissions

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources.

For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base and/or support resources. For reference for Cassandra clusters, click here.

Read and query permissions will need to be applied to grant adequate access.

Your SSL certificate may also need to be supplied with additional information from your source, such as:

JSON

{
  "host": "domain.cassandra.com",
  "port": "<XXXX>",
  "username": "<username>",
  "password": "<password>",
  "localDataCenter": "West US",
  "sslRequired": "true",
  "caCertificateBase64": "<base-64-string-of-root-certificate>",
  "mtlsEnabled": "true",
  "privateKey": "<private-key-for-certificate>",
  "privateKeyPassword": "<XXX>",
  "clientCertificate": "<base-64-string-for-certificate>"
}

{
  "host": "domain.cassandra.com",
  "port": "<XXXX>",
  "username": "<username>",
  "password": "<password>",
  "localDataCenter": "West US",
  "sslRequired": "true",
  "caCertificateBase64": "<base-64-string-of-root-certificate>",
  "mtlsEnabled": "true",
  "privateKey": "<private-key-for-certificate>",
  "privateKeyPassword": "<XXX>",
  "clientCertificate": "<base-64-string-for-certificate>"
}

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Limits

Keyspace
Table
Include/Exclude paths support keyspaces and tables

Include Path Details

Input the keyspaces and tables to be included within the scan.
Put [*] to scan all of the instances found in the Cassandra instance.

Collected Objects

For Cassandra clusters, Rows (and Columns) are contained inside Tables of a Database with the specified user fields. These vary based on used definition.


Object	Description
Database	A physical container for sets of related tables. A single server typically has multiple databases.
Tables	Equivalent of an RDBMS table. Multiple tables per database with a loosely defined schema
Row	A record in a Cassandra table and the basic unit of data. Equivalent to rows in an RDBMS datasource.
Field	A grouped source of data for all rows in a table.

Data Use Governance