> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-data-rule.md).

# Create a data rule

Data rules protect your environment against malware and enable data classification. To create a data rule:

1. Navigate to **Posture Management** → **Rules & Policies** → **Rules** → **Cloud Security**.
2. Select **Create Rule** → **Data**.
3. In the **Overview** step, provide the following:
   1. Enter a **Rule Name and Description.**
   2. Select a **Severity.** Findings generated by this rule will inherit this severity.
   3. (Optional) Add **Labels**.
   4. (Optional) Enable **Remediation** using the toggle. In a later step, you'll enter the remediation instructions.
   5. Click **Next**.
4. On the Rule Logic page, you can select options to build your data rule.
   1. Click **Select** and choose from the list of supported data assets categories such as database, disk, bucket.
   2. Click **WHERE** to choose from the attributes of the asset. Depending on the asset category you selected in the above step the list of attributes displayed will vary. For example, you can select FIND Bucket WHERE Type and Select values = S3 bucket.
   3. Click **+** to select the **Findings** such as Configuration Finding, Data Finding, Identity Finding, and so on.
   4. Click **WHERE** to choose from the attributes of the finding. Depending on the finding you selected in the above step the list of attributes displayed will vary.
   5. Once the logic is defined, click **Search** to test the rule against your current environment and view potential findings.
5. Click **Next** to define Remediation instructions (if you had turned on **Enable Remediation** in the Overview step) or click **Done** to save your rule.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-data-rule.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.