Discover cloud databases

Edit online

Discover databases in the cloud account by selecting the regions you want to search.

About this task

The databases table is populated and updated when you run Discover. Once a database has been discovered, it stays in the table, regardless of whether the database is still in the cloud..

Every time you navigate to Discovery > Database Discovery > Cloud DB Service Protection, Guardium informs you if the DB auditing status in the cloud is different from the status reported in the UI, with a message above the Database table: DB auditing status has changed for some databases. Click Refresh to update the table. When you see this message, click Refresh to refresh the display.

You can also perform this check on demand by clicking Retrieve status. The retrieve can take a few minutes. When it's complete, a message appears only if any of the DB audit statuses have changed. If there are changes, click Refresh

You can also upload cloud database definitions by CSV file. The required parameters are listed in Cloud Datasource APIs; the API parameter cloudTitle must be replaced with the parameter environmentTitle (they have the same function, but different names). See the upload procedure in Create Datasource for CSV uploaded via the Upload CSV menu in Customer Uploads, using the path Harden > Vulnerability Assessment > Customer Uploads to upload your file.

Procedure

  1. Navigate to Discovery > Database Discovery > Cloud DB Service Protection, and click the service account name.
    When you create a cloud account, the Discover Databases table is open, showing a list of all of the regions, with their RDS endpoints.
  2. When you access this page subsequently, the table is closed. Click Discover Databases.
    The table opens showing the regions.
  3. Select the row of each region whose databases you want to discover. Use the filter if relevant.
  4. Click Discover.
    Guardium searches the regions, and adds any databases that were not previously discovered to the databases table.