Overview

Netskope One DSPM enables you to scan unstructured data in AWS Elastic Block Store (EBS) Volumes within EC2 Instances, supporting Discovery and Classification to detect sensitive information associated with your unstructured data accurately. Follow the instructions below to configure and connect your EBS Volumes data store. Note that you will need to manually add the permission AmazonEC2FullAccess to your AWS IAM Permissions if you haven't already while onboarding AWS.

Connect Your Data Store

Field	Value
AWS Account Name	Select one of the AWS Accounts defined within the Infrastructure Connections screen. The field will default if there is just one AWS account configured.
Data Store Identifier	Friendly name to describe your data store. Your value is displayed in other Netskope One DSPM screens, such as Policy Management and Classification Management.
Volume ID	Volume ID of EBS Volume to be scanned. Obtain from your AWS S3 console.
Sidecar Pool	A new sidecar is created for each EBS volume scan, and once the scan completes, it is deleted. This sidecar is specific to EBS volumes only and cannot be manually edited or deleted.
Auto-Scan, Scan Frequency	Controls how often your Data Store is reviewed for changes; Netskope One DSPM’s recommended frequency defaults, which you can override if (desired).

7. Click the NEXT button. The Capabilities tab is displayed.

7. Complete the following fields:
   1. Assign a Data Owner (optional): define one or more platform users responsible for this data store and its data sets.
   2. Features: Netskope One DSPM’s recommended feature selections will be defaulted, which you can override if desired. Some features are always-on and some are not applicable (with disabled toggles).

9. Enabling Classification for EBS volumes triggers scanning and sampling files within the volume at your specified sampling rate, defined as the percentage of files in the bucket that Netskope One DSPM receives per scan. 
   1. 1000 files maximum are retrieved per scan, regardless of sampling rate. Even at a 100% sample rate, 1000 files are sampled per scan, and the remaining unscanned files are covered in subsequent scans.
   2. All non-image file types greater than 1GB will not scan. Image files greater than 10MB will not scan.
   3. Netskope One DSPM will only re-scan files in the EBS volume that have been modified since the last scan.
   4. You can optionally also include a regular expression to indicate sampling only specific file types.
10. Click the SAVE button, which will navigate you to the next tab.
11. On the REVIEW tab, Netskope One DSPM will validate your credentials and capability selections. In the event of any issues, follow the on-screen instructions to remediate the displayed warnings or errors.
12. Click the SAVE button to finalize your connection.

Supported File Types for Unstructured Data Store Scanning