ADD_SCOL_DISCOVER_RULE¶
Add a discover rule for sensitive columns.
Columns that satisfy all include patterns and that do not satisfy an exclude pattern are automatically flagged as sensitive columns. Include patterns have to be added while exclude patterns and the rule comment are optional.
Parameter Name |
Required |
DefaultValue |
Description |
---|---|---|---|
p_schema_incl_pattern |
yes |
.* |
schema include pattern |
p_schema_excl_pattern |
no |
schema exclude pattern |
|
p_object_incl_pattern |
yes |
.* |
object include pattern |
p_object_excl_pattern |
no |
object exclude pattern |
|
p_column_incl_pattern |
yes |
.* |
column include pattern |
p_column_excl_pattern |
no |
column exclude pattern |
|
p_comment_incl_pattern |
yes |
.* |
comment include pattern |
p_comment_excl_pattern |
no |
comment exclude pattern |
|
p_rule_comment |
no |
rule comment |
Example
Add a rule that discovers sensitive columns in schemas starting with ‘SCOTT’ except objects starting with ‘E’, columns starting with ‘D’ or columns having a comment containing the string ‘@@NOT SEC RELEVANT@@’. The comment ‘Test rule for discovering sensitive columns.’ is added to the sensitive column definition:
EXECUTE SCRIPT api_scurty.add_scol_discover_rule
( 'SCOTT.*' -- p_schema_incl_pattern
, NULL -- p_schema_excl_pattern
, '.*' -- p_object_incl_pattern
, 'E.*' -- p_object_excl_pattern
, '.*' -- p_column_incl_pattern
, 'D.*' -- p_column_excl_pattern
, '.*' -- p_comment_incl_pattern
, '.*@@NOT SEC RELEVANT@@.*' -- p_comment_excl_pattern
, 'Test rule for discovering sensitive columns.' -- p_rule_comment
);