Detecting sensitive data and misconfigurations in AWS and GCP with Cloudflare One
Mar 21, 2025Alex Dunbrack, Michael Leslie
Summary
This post introduces the extension of Cloudflare CASB to include Cloud DLP (Data Loss Prevention) functionality, enabling users to scan objects in Amazon S3 buckets and Google Cloud Storage for sensitive data matches. It details a serverless architecture for this process, involving a Compute Account, Controller function, Crawler function, and Scanner function, ensuring data remains within the customer's cloud environment. It also highlights posture management features for identifying misconfigurations in IAM, bucket, and object settings.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack