Automated Google Cloud Asset Detection Feature Guide

Note:

The Automated Google Cloud Asset Detection feature is available for customers with solution packaging only.

Introduction

The Data Mapping Discovery Automation feature from OneTrust allows you to sync with external systems with secure credentials to seamlessly generate records in your data map without extensive, technical setup. This promotes easier monitoring of assets to maintain up-to-date inventories, which improves visibility and reduces manual configuration fatigue.

This article covers how to set up an automation for Google Cloud Platform (GCP) assets with essential information on the naming convention and credential configuration.

For additional information on how to manage automation details post setup, see Data Mapping Discovery Automation Overview. For guidance on reviewing pending assets, Inventory Review & Automation Feature Guide.

Discoverable Resources

OneTrust creates the GCP asset differently depending on the resource type:

  • BigQuery: one asset per each dataset

  • Bigtable: one asset per each instance

  • Cloud SQL (MySQL, PostgreSQL, and SQL Server): one asset per each instance

  • GoogleCloud Storage: one asset per each bucket

Required Permissions

To set up automation

  1. On the Data Mapping Automation menu, select Inventory > Assets. The Assets screen appears.

  2. Click the Manage automation button. The Automations screen appears.


  3. Click the Set up automation button. The Set up automation modal appears.


  4. Select Assets for the configuration, then click the Next button.


  5. Select the Google Cloud tile.


  6. The modal will update with automatically generated details for this new automation.

    • The automation name defaults to "GCP_" with a random, system-generated alphanumeric ID. Example: GCP_d1NL2W9.

    • Scanned assets will observe the following naming convention: {resource-name}_{project_id}

      Example: asset_154815324032



    Note:

    The automation details are set to default and you can modify them later in the automation page. These can be modified post-setup. The automation will run upon creation.

  7. Select existing credentials from prior automations or create new credentials.


    Creating new credentials requires that you provide the Client ID, Private Key, and Private Key ID from your account.



  8. When finished, click the Create automation button. The automation will be executed and you will be navigated back to the Automations list screen.


    Tip:

    If an error message is shown for automation failure, check your credentials.



  9. Your automation is now running and ready to populate your data map. The next sync will occur one month from the creation date. For additional information on how to manage automation details post setup, see Data Mapping Discovery Automation Overview.