Views:
Enable Data Security Posture to discover and classify sensitive data in your Google Cloud projects, and predict potential attack paths for data leakage due to misconfiguration and vulnerability.
You can enable Data Security Posture on both new and existing Google Cloud projects in Cloud Accounts. For more information on Data Security Posture, see Data Security Posture.

Procedure

  1. Go to Cloud Security → Cloud Accounts → Google Cloud.
    Tip
    Tip
    You can also access the Cloud Account app by going to Data Security → Data Security Posture, clicking Settings, and selecting Add/update Google Cloud project.
  2. Click the name of a Google Cloud project.
  3. Click the Resource Update tab.
  4. In the Select features and permissions section, enable Data Security Posture.
    By default, all available regions are selected. To enable Data Security Posture for selected regions only, expand the Data Security Posture section and select the regions you want from the Deployment list.
  5. Access the connected project.
    Copy the command or type gcloud config set project [projectID].
  6. If the parent directory does not exist, create the parent directory.
    Copy the command or type mkdir -p [projectID].
  7. Access the project parent directory.
    Copy the command or type cd [projectID]. Extract the template using the comand in the Project Settings screen.
  8. Extract the template using the comand in the Project Settings screen.
    • Select Upload via CLI to upload the resource package directly to your project. Copy the command from the Project Settings screen to retrieve the package.
    • Select Manual Upload to download the template to your local machine and upload to your project. Click Download Resource Creation Script to save the .zip file and upload to your project.
  9. Extract the template to a new folder.
    To prevent issues with deployment, the .zip file contains a random number in the file name. Copy the command from the Project Settings screen.
  10. Access the deployment folder.
    Copy the command or type cd cloud-account-management-terraform-package.
    Important
    Important
    The resource creation script must be the only terraform file in the directory. Having more than one terraform file in the folder interferes with deployment process and might cause the update to fail.
  11. Run the deployment script.
    Copy the command or type ./deploy.sh.
    Google Cloud Shell begins the terraform process to deploy Trend Vision One security resources.
  12. In the Trend Vision One console, in the Project Settings screen, click Save Changes.
    The update process might take a few moments to complete. You can refresh the Cloud Accounts screen to check the status of your update.