Getting Started with Discover

Discover is an Immuta module that scans your data sources and applies relevant tags when data is recognized. This eliminates a manual tagging process for your data, saving you time and providing standard taxonomy across all your data sources.

Start with use cases

Discover is a building block used by both Immuta Detect and, depending on your use case, Immuta Secure.

To learn more about how specifically Immuta Discover works with Immuta Detect see the following guides:

• Monitor and secure sensitive data platform query activity use case
• Automating entity and sensitivity discovery guide

Requirements

• Registered Snowflake, Databricks, Redshift, or Starburst (Trino) data sources
• Immuta permission GOVERNANCE

Implement SDD

Sensitive data discovery (SDD) is an Immuta Discover feature that identifies your data sources and applies relevant tags when data is recognized. This eliminates a manual tagging process for your data, saving you time and providing standard taxonomy across all your data sources.

To learn more, see the Data discovery page.

Enable sensitive data discovery

Enable sensitive data discovery to start using the default framework on all of your registered data sources. This out-of-the-box framework discovers common data types and tags them automatically when a new data source is registered.

Configure SDD for your data

For additional control, create your own identifiers to recognize the data that matters to you. Add these identifiers to new frameworks and specify the data sources that need this framework. This fine-level control creates automatic tagging that is relevant and accurate to your data, requiring fewer manual adjustments to the resulting tags.

1. Customize SDD for your data:
   1. Create identifiers
   2. Create a framework
2. Assign your framework to specific data sources

Adjust Discovered tags

If you have any tags that are applied to your data sources by SDD that you don't want, you can easily disable these tags for each data source. This ensures that they will not be applied to the data source again if identification is re-run.

1. Verify tags
2. Disable Discovered tags

Reference pages:

Immuta comes with a default framework containing built-in Discovered tags and built-in identifiers. These identifiers and tags can be used in your own frameworks.

1. Built-in Discovered tags
2. Built-in identifiers

Implement classification

Classification is an Immuta Discover feature that categorizes your data based on the content and the associated risk the data poses. This increases your understanding of your data and allows you to make faster decisions about it.

Enable classification

Contact your Immuta representative to turn on classification and the data dashboard for your Immuta instance.

Activate a framework

Activate any of the following frameworks:

• To start seeing classification tags, enable the Data Security Framework.
• If you are using Snowflake and want to see information on your sensitive data in Detect, enable the Risk Assessment Framework.
• Opt to enable any of the other compliance frameworks.

Complete the following steps for each framework you want to activate:

1. Navigate to Discover and select the Classification tab.
2. Click the more actions icon in the Actions column for the framework you want to activate.
3. Select Activate.

Configure classification for your data

To configure or manage a framework using the Immuta API, see the Frameworks API reference page.

Adjust classification tags

If you have any tags that are applied to your data sources by classification that you don't want, you can easily disable these tags for each data source. This ensures that they will not be applied to the data source again when classification is re-run.

1. Assess your data source tags.
2. Tune your data dictionaries.