Running Security Operations

This section describes how you can use the Sample Application instances running on the Auto Scaling Group on the EC2 instance to protect the data that is sent by a REST API client.

To run security operations:

1. If you are not using TLS authentication between the Sample Application instance and the REST API client, then send the following cURL request from the Linux instance:

   curl <DNS name or IP address of the AWS Load Balancer>/protect -H 'Content-Type: application/json' --data-raw '{"dataElement": "Alpha", "policyUser": "user1", "input": ["protegrity1234", "helloworld"]}'

   The Sample Application instance internally sends this request to the Application Protector Java and returns the protected value.

   If you want to unprotect the data, then you can run the following command:

   curl <Host name of the AWS Load Balancer>/unprotect -H 'Content-Type: application/json' --data-raw '{"dataElement": "Alpha", "policyUser": "user1", "input": [ "iaDDNBdH6EI8U", "9jB7cRSuk98B" ] }'

   If you want to reprotect the data, then you can run the following command:

   curl <Host name of the AWS Load Balancer>/reprotect -H 'Content-Type: application/json' --data-raw '{ "dataElement": "Alphanum", "newDataElement": "Alphanum1", "policyUser": "user1", "input": [ "iaDDNBdH6EI8U", "9jB7cRSuk98B" ] }'

   For more information about the AP Java APIs, refer to the following section Application Protector Java APIs.

   For more information about the AP Java API return codes, refer to the section Application Protector API Return Codes.

2. Access the audit logs from the Insights Dashboard.

   For more information about accessing the audit logs, refer to the section Working with Discover.