Sensitive data access and export

The Data Access page displays access volumes, access trends, export volumes, and export details for sensitive data identified by your configured rules. This provides visibility into all access events involving your sensitive data. This feature currently supports operational data from MaxCompute and E-MapReduce engines.

Prerequisites

Your Alibaba Cloud account must be authorized to use Data Security Guard. For more information, see Data Security Guard.

Background

Data access and export information is available one day after you configure sensitive data rules.

Procedure

Go to Data Security Guard.
1. Log on to the DataWorks console. In the target region, click Data Governance > Security Center in the left-side navigation pane. On the page that appears, click Go to Security Center.
2. In the left-side navigation pane, click Data Security > Sensitive Data Management and then click Try Now to access Data Security Guard.
  Note
  - If your Alibaba Cloud account is already authorized, you are directed to the Data Security Guard homepage.
  - If your Alibaba Cloud account is not authorized, you are redirected to the Data Security Guard authorization page. To use Data Security Guard features for the first time, go to Data Security > Sensitive Data Management, select Data Security Guard in the pop-up dialog, and then complete the authorization.
In the left-side navigation pane, click Data Access.
The Data Access page includes two tabs: Manipulations and Queries and Export:
- Manipulations and Queries: Tracks successful Select, Create, and Insert operations. Failed access attempts are not tracked.
  
  One day after you configure sensitive data rules, you can view data usage on the Manipulations and Queries tab. This tab includes the Visit Overview, Trend, and Records sections.
- Export: Tracks data export operations that use MaxCompute Tunnel.
  
  One day after you configure sensitive data rules, you can monitor how users export data from MaxCompute to external locations on the Export tab. The tab displays the total data volume exported within a specified time range, daily export volume, and the top five users ranked by total export volume.