Enabling and setting up API scanning in Forcepoint Data Security Cloud | App Security

You can grant access to S3 through a created Identity and Access Management (IAM) user or through Security Token Service. For the IAM user, use the same Amazon Web Services (AWS) account you used to configure AWS in the Forcepoint Data Security Cloud | App Security Portal.

Before you begin

Before you begin, enable API scanning:

You can either setup a Role Amazon Resource Name (ARN) that the user account assumes to grant the proper permissions or Forcepoint Data Security Cloud | App Security recommends setting up a unique IAM user account and applying the proper policy to the account. You will need the following information in addition to the user account name and password:
  • User account Access Key ID.
  • User account Secret Access Key (this is only viewable when a new account is created, can be downloaded and saved).

Steps

  1. Start by logging into the Forcepoint Data Security Cloud | App Security admin portal and navigating to the AWS application settings page. Select Setup API and then check the box to Enable API Scanning.




  2. From there you can add your AWS tenant and select how you wish authenticate Forcepoint Data Security Cloud | App Security. Start by clicking the green plus icon and selecting your credential option.




  3. Depending on which option you select (IAM user or Security Token Service (STS) token), you will need to follow different steps. First follow the next section titled Create Policy then once you are done skip down to the proper authentication method you decided to use.