Redis Connector

Overview

Note:

This connector is currently under Public Preview. Contact OneTrust Support to request early access.

Pod Residency

nosql-scanner

Supported Scan Actions

Scan Type

Description

Catalog

This scan type fetches only the metadata in the project like details of dataset, table, or column for scanning.

Catalog & Scan

This scan types fetches both metadata and data under the tables and returns the appropriate labels.

Credentials and System Permissions

Permissions/Privileges

Client will need host, port, username and password to connect.

JSON
{
  "connectionUrl": "redis://[password@]host[:port][/databaseNumber]",
  "user": "<username>",
  "password": "<password>"
}

Example Credential JSON

JSON
{
    "password" : "<password>",
    "isClusterEnabled" : "true",
    "isSslEnabled" : "true",
    "port" : "<port>",
    "host" : "<hostname>",
    "timeout" : "5000",
    "isPoolConfigEnabled" : "true"
}

User Permissions:

In order to get all keys and values we need users with read-only access permissions to read all keys. Users should have access to commands that he can use to retrieve the data from Redis.

The following is the permission that user needs to execute commands that will help to read keys and values for different data structures available in Redis: +@read -

To create user with read permission only:

CODE
ACL SETUSER virginia +@read ~

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Limits

  • Maximum Number of Databases

  • Max Number of Keys per Database (Representative Scans allowed)

  • Maximum Number of Values per Key (if that key can store multiple values, representative scans allowed)

Include/Exclude Paths

  • Databases

  • Keys

Collected Objects & Fields

Everything in Redis is stored in format of key value pair.

  • Strings

  • Lists

  • Sets

  • Hashes

  • Sorted Sets

  • Bitmaps

  • HyperLogLog