Enable Data Security Findings for AWS

Data Security Findings helps you discover and prioritize sensitive data risks in your AWS environment by automatically identifying and classifying sensitive information such as Personally Identifiable Information (PII), Protected Health Information (PHI), and financial data. This add-on keeps sensitive information within your AWS account while providing visibility across your environment. The findings can be used by Sysdig’s Risk engine to highlight potential blast radius during investigations and guide remediation efforts.

Sensitive data is analyzed in-place and remains within your AWS accounts during scanning.

AWS services that are currently supported for scanning include:

  • S3 Buckets
  • RDS Databases

Prerequisites

  • An AWS Account or Organization already connected to Sysdig.
  • A Sysdig Secure Risk Management or CNAPP subscription with the Data Security Findings add-on.

RDS requirements

Sysdig scans an RDS database from an automated backup instead of the live database, so that scanning doesn’t affect its performance. To get sensitive data findings for an RDS database:

  • Turn on automated backups. Set the backup retention period to at least 1 day. A database with automated backups turned off will not be scanned or show findings.
  • Check the region is covered. Scanning is deployed per region. Sysdig scans RDS databases only in the regions where Data Security Findings is deployed for your account. This doesn’t apply to S3 buckets. To scan databases in another region, contact your Sysdig account team or support representative.

Enable Data Security Findings

  1. Contact your Sysdig account team or support representative to enable Data Security Findings for your AWS accounts.
  2. Once provisioned, log in to Sysdig Secure and navigate to Integrations > Environments > AWS.
  3. Select the AWS account you want to verify. Data Security Findings will appear in the features list once enabled.

Check Enabled Status

You can confirm whether Data Security Findings is active for your account:

  1. In Sysdig Secure, go to Integrations > Environments > AWS.

  2. Select the account.

    The detail panel on the right will show the status of Data Security Findings.

  3. If onboarding is complete, the feature status will show Enabled or Healthy.