How do you and welcome back now in the earlier video we were discussing about the basics of mercy service,
so what we do in today's video will go ahead and configure the mercy from scratch so that we understand
the practical steps as we know from the eatables management console.
Let's go ahead and quickly open up the mercy service, and let's go ahead and click on Get started and
you can go ahead and enable me.
See?
I like so very simple step to enable me.
See?
Now, once you have enabled me, see, it basically will go ahead and looking to your S3 bucket configuration,
and it will give you details associated with whether a bucket has a public access, encryption related
data and sharing related data.
So till the time it also looks into it, let's go ahead and upload some data that can contain sensitive
credentials in history.
So for today's video, I have to.
Phase one is call as the Access Haven Secret 01..
The second is referred to as Access Haven Secret zero 2.2.
So if you're looking to go file, basically both of them contains the access, secret keys and access.
Secret keys are exactly same in both of these files.
The only difference is the highlighted part where we have Defender Database Access Guide and E.W. Secret
Access Guide.
So this denotes the exact configuration that you will see in the aid of these credentials that essentially
configured.
Now there is a reason why we're using both of these file formats for better understanding.
One we see would work.
So at the end, you will see that sensitive credentials are part of both these files.
Let us look into whether music can detect both of them.
So till the time we see is retrieving their data, let's go ahead and go to S3 service and within one
of the bucket in the same region.
Let's go ahead and upload both of our files.
I lied face
and I'll select both of these files.
Let's go ahead and click on Upload.
Perfect.
Let's also verify.
So basically, this bucket has two files data available.
So now let's do one thing before we go ahead and initiate this can offer S3 bucket.
Let's go ahead and wait for this specific data to be loaded both, which will be looking into the next
step as well.
All right.
So it has been around five minutes and a retrieval of data is completed.
So it is giving you access information.
The encryption information and the sharing information you have at this specific speed, you'll see
the scanning is not been initiated by me.
So what you need to do if you want to initiate a scan, you can go ahead and quickly create a new job.
You can specify the bucket.
So this is the bucket that is available in the Singapore region, whether configured.
Let's click on next.
Let's do a next game.
And within you, you can either see a one time job or you can go ahead and schedule a job with the frequency
of daily, weekly and monthly.
I do know that the more you scan, the more you will be charged.
So this is one important part to remember.
So let's do one thing since we are just exploding this, he will just use it as a one time job already,
so it will scan for one thing, and that's about it.
However, generally for organizations, they use scheduling job not to deliver a weekly, generally
for monthly.
But again, it depends on how much money the organization have anyways, so will use a one time job
yet.
Let's quickly do our next.
Let's do a next.
We don't have any custom detailing device that is fine, and let's just call it as they move me.
See job.
Let's do a next.
It is showing as the review screen will go ahead and do a submit.
Great.
Now at this date and the job is being initialized and you will not really see any detail ability for
you to quickly go to jobs or area, you should see that your job is currently active and running.
No job in music can take a little amount of time.
It can take around 15 to 20 minutes again.
It all depends upon how much data you have at a steady market level.
So let's do one thing.
Let's quickly wait for a moment here for the job to be completed.
I posted a video and will resume once this thing does is complete.
All right.
So it has been around 10 minutes and our job is now completed.
Now, if we'll quickly look into this summary earlier, let's go big down here.
You see that it was able to identify that the bucket basically contains some sensitive credentials.
It also gives you the bucket on the left hand side.
Let's explore what are the sensitive credentials it was able to detect.
Now, one interesting thing that you will see is that the finding is only one, but we had uploaded
to fixed files with sensitive credentials.
But among these two, it was only able to detect the axis secret zero 2.60 the zero the 60 was not detected
with.
So just to release the first file access secret 01. to exceed this file was not detectable.
But the second file was detected.
Now, if you'll quickly open this up, it basically gives you all the details associated with it and
within.
It also states that it is it eatables credentials audio?
No.
One important part as we were discussing that data, certain regular expressions based on which you
may see will scan the files as you're discussing.
It can look into bank account numbers, bad data, AWB credentials.
But there is a specific regular expressions based on which this can would happen.
It is not 100 percent that you upload a database into in a different format and that would be detected
out of the box.
So in case if you want to have a customization based on your knee, you can create your own custom need
to identify it.
So within you, you can create your own regular expressions audio.
So this is where you upload uploader regular expressions you can tested against the sample data.
And based on the regular expression, Macy will go ahead and evaluate the data on a three year along
with that in their discovery zone.
You can also go ahead and configure a bucket basically where all of your results will be stored for
a longer time.
So this is something that you need to do at a production level.
Now, since we are only doing a small town testing, this is fine for the time.
But just remember individual configuring measured production level.
Now, before we conclude, let's also go ahead and suspend the MRR after you have completed the practical
to avoid any unexpected results.
So since we have enabled me CVS still within that framework.
So this is the day when no trial mode, so it is better that you go ahead and suspend me, see, after
you have completed up activities.
So within these settings here you can go ahead and disable Missy.
No, I also know that in case if you're wondering what are the other findings that Niecy can provide,
you can also generate sample findings.
Audio and sample findings would be generated.
So if you go to somebody's audio, you should see one modesty bucket where there are in total of 10
findings, it will open this up.
These are all the findings associated with the bucket, so you have certain data types.
So this is associated with financial information and various others that you can explore.
However, let's go back to settings and within year you have such spending visible if you are more interested
in this table where all of your data is permanently deleted.
So let's go ahead and disable it.
So it is space very disabled and great.
We are back to their default screen yet.
So that's the basics of me.
See service in a practical point of view, and with this will conclude today's video.