Inspecting and De-Identifying Data With Google Cloud Data Loss Prevention

Lab Steps

lock
Signing In to the Google Cloud Console
lock
Starting a Google Cloud Shell
lock
Creating a File to Inspect
lock
Inspecting Objects Inside a Cloud Storage Bucket
lock
De-Identifying Sensitive Data Inside a Text File

The hands-on lab is part of these learning paths

Google Data Engineer Exam – Professional Certification Preparation
course-steps
13
certification
1
lab-steps
6
description
1

Ready for the real environment experience?

DifficultyIntermediate
Time Limit45m
Students170
Ratings
5/5
starstarstarstarstar

Description

Data has become an essential and key store of value for enterprises. Because of this, companies need to protect and handle data in a secure and efficient way. Following this guideline, Google offers Cloud Data Loss Prevention (CDLP). This is a fully managed service that helps you analyze, inspect, and de-identify your data. By using CDLP, you can inspect millions of data and understand which of them are sensitive and should be de-identified or encrypted. You can also automatically let it mask your sensitive data (this operation is known as de-identifying). CDLP has more than one hundred infoTypes. An infoType is a type that represents a piece of sensitive information, such as a date, a name, an email address or a phone number. When you let CDLP de-identify your data, it will mask all pieces of information that are associated with one of the predefined infoTypes.

In this lab, you will upload data to a Cloud Storage bucket, you will start an inspection of this data to understand whether it contains sensitive information, and you will de-identify sensitive information by using REST APIs.

Learning Objectives

Upon completion of this lab you will be able to:

  • Set up an inspection of data stored in Cloud Storage
  • Review the result of inspection to understand whether data contains sensitive information
  • De-identify sensitive data inside a text file

Intended Audience

This lab is intended for:

  • Google Cloud Professional Security Engineer (PSE) certification candidates
  • Security Engineers who want to handle data in a secure and efficient way
  • Individuals who want to let GCP identify sensitive information and mask it

Prerequisites

This lab has no prerequisites.

Environment before
PREVIEW
arrow_forward
Environment after
PREVIEW
About the Author
Students11122
Labs36
Learning paths1

Stefano studies Computer Science and is passionate about technology. He loves working with Cloud services and learning all the best practices for them. Google Cloud Platform and Amazon Web Services are the cloud providers he prefers. He is a Google Cloud Certified Associate Cloud Engineer. Node.js is the programming language he always uses to code. When he's not involved in studying or working, Stefano loves riding his motorbike and exploring new places.