Views:
TrendAI Vision One™ File Security Storage provides easy deployment to Google Cloud Platform (GCP) using the Cloud Account Management Terraform template to integrate automated scanning of files as you upload them into your storage and effortlessly detect all types of malware including viruses, trojans, spyware, and more. Currently, File Security Storage only supports single subscription accounts.
Note
Note
File Storage Security does not support Zonal buckets. They will be listed in the UI, but they are grayed out. You will be unable to deploy scanners to them

Procedure

  1. In the TrendAI Vision One™ condole, go to Cloud Security → File Security
  2. On the Inventory page, under Storage, select GCP.
  3. Click Add a single Google Cloud Project to protect buckets.
  4. Select Single Google Cloud Project, and click Next
  5. On the General information page:
    1. Enter the organization or folder ID.
    2. If you wish, you can enter a description to help identify the project.
    3. Enter the IDs of projects that you want to exclude.
    4. Select the regions in which you want to deploy the File Security scanner.
      Note
      Note
      Select every region that contains buckets you want to protect. A bucket in a region where no scanner is deployed is listed on the Inventory page, but you cannot turn on scanning for it.
    5. Click Next.
  6. Click Next.
  7. On the Features and Permissions page, enable .
    • Core features and Cyber Risk Exposure Management
    • File Security storage
  8. Open the GCP Console in another tab.
  9. Set the stack parameters:
    1. In Google Cloud Shell, create your deployment folder.
    2. Upload the stack template zip file to your cloud environment.
    3. Extract the files from the zip file.
    4. Change the directory to the deployment folder.
    5. If you want to have File Security Storage automatically quarantine, promote and fail scanned file, set the following parameters in the main.tffile.
    6. Run the Terraform deployment script.
      When the script successfully deploys the stack, the subscription appears under Google Cloud on the Inventory page.
  10. Click Done.

Next steps

Now you need to enable the scanner for the containers in each region that you enabled in your template