Hi,
I m running multi tenancy self managed environment 8.8 cloud.
We have the multiple tenants. I don’t want any tenants unknowingly pass any customer data or secrets in the process variable. If anyone is passing I want to validate or mask that data as a cloud infrastructure team. How we can do this as part of camunda
If I understand correctly, you effectively want to detect, and ideally react to senditive data passed in as process variables…
One pattern which comes to mind is to place the detection at an API gateway layer. Hence use an API gateway policy to detect via pattern match etc sensitive content passed in via api calls and thus trigger the required action. This can work well for structured content such as credit card numbers etc but becomes less certain in unstructured content…
Note this pattern only works at the inbound perimeter, content retrieved vi say connectors woukd not pass this route…
Perhaps its possible to publish an event stream of variable operations from the logs and pass through a similar detection pattern
Regards
Rob
Thanks. But how can I achieve this in the Camunda deployment ?