Manage Classification Policies
Who can use this feature
Anyone with these permissions: Manage classification policies
This article explains how to create and manage classification policies for your project.
From the Classification policies page, you can create a classification policy to schedule recurring classification scans on a set of resources, without backing them up. For background on when to use a classification policy, see About Classification Policies.
Create a classification policy
To get started, in the Classification policies page, click Create Classification Policy.
Name the policy
Provide a Name for the classification policy.
A good policy name describes the resources it classifies, for example Production classification.
Click Continue.
Choose the dynamic resource selection
In Dynamic resource selection, select the policy’s default behavior for including resources:
-
Include all: All resources are included in the classification policy by default. When new resources are discovered, they’re included too.
-
Use conditions: Only the resources that match the conditions you set are included by default. You can set a simple AND or OR list of conditions, or group conditions for fine-tuned targeting of resources. See Work with conditions and Work with groups below for how to work with these options.
-
Exclude all: No resources are included by default. Unless you include resources with manual overrides, no resources are classified by the policy.
With Include all or Use conditions, the list of resources assigned to the policy can change over time. As Eon discovers new resources that match the policy’s selection criteria, those resources are automatically included in the policy and classified on the next scheduled scan.
Work with conditions
-
To add a condition: Click (Add condition), then select the property, operator, and value for the condition.
-
To add a condition within a group: Click the large (Add condition) button in the group, or select (Add condition) > Add condition > Above or Below. Then select the property, operator, and value for the condition.
-
To delete a condition: Click the condition’s (Actions) menu, then click Delete condition.
For each condition, set the property, operator, and value.
Work with groups
-
To nest an existing condition or group in a group: In an existing condition or group, click (Actions) > Create group. Select the group’s logical AND or OR operator.
-
To delete a group and all the conditions it contains: Click the group’s (Actions) menu, then click Delete group.
You can also manually include or exclude resources by resource ID, overriding the dynamic selection.
In Included resources or Excluded resources, choose or enter the resource ID you want to override in the respective list, and click to add it to the list. You can provide IDs for resources that aren’t in your inventory yet, but that you anticipate will be discovered at some point in the future.
Click Next.
Review the resources list
In the Resources list step, review the resources that meet the conditions you set to make sure there’s nothing unexpected.
If you need to make changes, click Back to edit your conditions and manually assigned or excluded resources.
Click Next to continue.
Set the classification schedule
Choose whether you want a Basic or Advanced schedule type.
Basic schedule
Advanced schedule
With a basic schedule, you set the frequency and Eon sets the start time automatically.
Choose a daily, weekly, monthly, or annual frequency:
Classification scans can run at most once a day. Sub-daily frequencies aren’t available for classification policies.
A classification policy has exactly one schedule, and the schedule doesn’t include a vault or retention period, since classification scans don’t create snapshots.
When you’re done, click Create.
The policy is created, and Eon begins running classification scans on its assigned resources according to the schedule you set.
Enable or disable a classification policy
You can enable or disable a classification policy at any time. Each policy is enabled by default when you create it. To toggle a policy’s status, click the switch in the upper right corner of the policy card.
When a policy is disabled, it stops being applied to resources, but its settings are kept. Deleting a policy instead removes its settings permanently, so disable a policy rather than deleting it if you want to keep the option to turn it back on later.