Cloud Manager 3.9 docs
Release notes
- Cloud Manager
- Cloud Volumes ONTAP
Important changes
Get started with Cloud Manager
- Learn about Cloud Manager
- Networking overview
- Sign up to Cloud Central
- Log in to Cloud Manager
- Set up a Cloud Central account
  - Learn about Cloud Central accounts
  - Set up an account
- Set up a Connector
- Where to go next
Manage Cloud Volumes ONTAP
- Learn
- Get started in AWS
- Get started in Azure
- Get started in GCP
- Provision and manage storage
- Manage storage VMs
- Replicate data
- Monitor performance
  - Learn about Monitoring
  - Get started
- Improve ransomware protection
- Administer
Provision volumes using a file service
- Azure NetApp Files
- Cloud Volumes Service for AWS
- Cloud Volumes Service for GCP
Manage ONTAP clusters
- Discover ONTAP clusters
- Manage clusters using Active IQ
- Manage ONTAP volumes
Create templates to standardize resource creation
- Learn about Application Templates
- Get started
Back up data to the cloud
- Learn about Cloud Backup
- Get started
- Manage backups
- Restore from backups
Copy and synchronize data
- Learn about Cloud Sync
- Get started
- Tutorials
- Manage sync relationships
- Manage data brokers
- Uninstall the data broker
- API
- FAQ
Gain insight into data privacy
- Learn about Cloud Compliance
- Get started
  - Deploy Cloud Compliance
  - Activate scanning on your data sources
- View governance details about your data
- View compliance details about your data
- Manage your private data
- Add custom personal data identifiers
- Generate reports
- Respond to a DSAR
- Categories of private data
- Remove data sources from Cloud Compliance
- FAQ
Enable real-time global file sharing
- Learn about Global File Cache
- Before you begin to deploy Global File Cache
- Getting started
- Before you begin to deploy Global File Cache Edge
- Deploy Global File Cache Edge
- End-user training
- Additional information
Optimize cloud compute costs
- Learn about the Compute service
- Get started
Tier data to the cloud
- Learn about Cloud Tiering
- Get started
- Set up licensing
- Test cloud performance
- Manage data tiering
- Get an overview of tiering
- FAQ
- Reference
View Amazon S3 buckets
Administer Cloud Manager
- Find your system ID
- Manage Connectors
- Manage credentials
- Manage your account
- Install an HTTPS certificate
- Remove working environments
- Configure proxy settings
- Reference
Automate with the API and IaC tools
- API Developer Guide
- Automate using IaC tools
Troubleshoot issues
Related links
Earlier versions
Legal notices

Scanning object storage that uses S3 protocol

04/08/2021 Contributors Download PDF of this page

Complete a few steps to start scanning data within object storage directly with Cloud Compliance. Compliance can scan data from any Object Storage service which uses the Simple Storage Service (S3) protocol. This includes NetApp StorageGRID, IBM Cloud Object Store, Linode, B2 Cloud Storage, and more.

Quick start

Get started quickly by following these steps, or scroll down to the remaining sections for full details.

Review object storage prerequisites

You need to have the endpoint URL to connect with the object storage service.

You need to have the Access Key and Secret Key from the object storage provider so that Cloud Compliance can access the buckets.

Deploy the Cloud Compliance instance

Deploy Cloud Compliance if there isn’t already an instance deployed.

Add the Object Storage Service

Add the object storage service to Cloud Compliance.

Select the buckets to scan

Select the buckets that you’d like to scan and Cloud Compliance will start scanning them.

Reviewing object storage requirements

Review the following prerequisites to make sure that you have a supported configuration before you enable Cloud Compliance.

You need to have the endpoint URL to connect with the object storage service.
You need to have the Access Key and Secret Key from the object storage provider so that Cloud Compliance can access the buckets.

Adding the object storage service to Cloud Compliance

You must have deployed an instance of Cloud Compliance in Cloud Manager already.

Add the object storage service.

Steps

From the Working Environments Configuration page, click Add Data Source > Add Object Storage Service.
In the Add Object Storage Service dialog, enter the details for the object storage service and click Continue.
1. Enter the name you want to use for the Working Environment. This name should reflect the name of the object storage service to which you are connecting.
2. Enter the Endpoint URL to access the object storage service.
3. Enter the Access Key and Secret Key so that Cloud Compliance can access the buckets in the object storage.

Result

The new Object Storage Service is added to the list of working environments.

Enabling and disabling compliance scans on object storage buckets

After you enable Cloud Compliance on your Object Storage Service, the next step is to configure the buckets that you want to scan. Cloud Compliance discovers those buckets and displays them in the working environment you created.

Steps

In the Configuration page, click Configuration from the Object Storage Service working environment.
Enable compliance on the buckets that you want to scan.

Result

Cloud Compliance starts scanning the buckets that you enabled. If there are any errors, they’ll appear in the Status column, alongside the required action to fix the error.