# 3DS Outscale Security Integration | Continuous FIM, DSPM & Ransomware Defense · tamper

> Secure your 3DS Outscale buckets with continuous File Integrity Monitoring (FIM), DSPM posture auditing, and early ransomware detection via native S3 API.

## SecNumCloud-Grade Integrity & Agentless FIM for 3DS Outscale (OOS).

Engineered for Defense, OIV/OSE critical operators, and regulated public sector workloads on 3DS Outscale Object Storage. tamper delivers 100% agentless cryptographic proof for ISO 27001, NIS 2, and DORA compliance.

## Why secure 3DS Outscale storage with tamper?

On hardened 3DS Outscale environments (including cloudgouv-eu-west-1), installing third-party endpoint agents is strictly prohibited. tamper audits OOS buckets externally via standard SigV4 read-only API calls.

- **100% Agentless for Restricted Perimeters** (01 / HARDENED ENVIRONMENTS): Comply with strict defense and ANSSI security policies: tamper deploys on an isolated VM or dedicated Universe appliance with zero agents on your workloads.
- **Tamper-Evident Audit Trails for NIS 2 & DORA** (02 / FORENSIC EVIDENTIARY PROOF): Generate verifiable SHA-256 integrity logs, CIS posture scores, and DLP reports ready for regulatory inspections on eu-west-2 and cloudgouv.
- **On-Premise Inspection Within Your Perimeter** (03 / LOCAL AI & ZERO DATA LEAKAGE): All metadata, cryptographic hashes, and AI document evaluations remain strictly confined inside your sovereign security perimeter.

## Connect 3DS Outscale in under 2 minutes

tamper connects natively via standard 3DS Outscale read-only S3 API credentials with zero disruption to your existing workflows.

- **Provider**: `Outscale` (Pre-configured cloud storage connector)
- **Endpoint**: `oos.eu-west-2.outscale.com` (e.g., oos.eu-west-2.outscale.com or oos.cloudgouv-eu-west-1.outscale.com)
- **Region**: `eu-west-2` (3DS Outscale region (eu-west-2, cloudgouv-eu-west-1))
- **Bucket Name**: `my-outscale-bucket` (Target private 3DS Outscale bucket)
- **S3 Access Key & Secret**: `OSC... / ...` (Read-Only S3 API credentials)

> Principle of Least Privilege: tamper strictly operates in Read-Only mode on 3DS Outscale. tamper never requests write or delete privileges on your production objects.

## Comprehensive Security Posture Across 3DS Outscale

- **FIM (File Integrity Monitoring) - Cryptographic Object Fingerprinting**: Tracks SHA-256 baselines across all 3DS Outscale objects, identifying unauthorized modifications and silent corruption.
- **DSPM (Data Security Posture Management) - Bucket Configuration & Access Controls**: Continuously audits 3DS Outscale bucket visibility, encryption settings, Object Lock, Versioning, and lifecycle rules against CIS security benchmarks.
- **DAM (Data Access Monitoring) - Access Anomaly & S3 Gateway Protection**: Monitors data access patterns and supports optional inline protection via the tamper S3 Gateway for real-time request filtering and anti-wiper quotas.
- **DLP (Data Loss Prevention & Ransomware Guard) - Entropy Qualification, AI Tagging & Canaries**: Detects encryption spikes (~7.99 Shannon entropy), qualifies document alterations with local AI, and monitors stealth canary objects.

## Technical Architecture: Native S3 API Compatibility with 3DS Outscale

tamper communicates with 3DS Outscale over standard HTTPS S3 endpoints (oos.eu-west-2.outscale.com) using AWS Signature Version 4 (SigV4).

- **1. Standard S3 SigV4 Protocol**: Full interoperability with your existing 3DS Outscale pipelines, backup tools (Veeam, rclone, restic), and cloud-native applications.
- **2. 100% Agentless Operation**: Audits run externally on your dedicated VM or tamper appliance without deploying any software inside your compute instances.
- **3. Strict Read-Only Boundary**: Non-destructive cryptographic inspection ensures your object payloads, custom metadata, and version histories are never altered.

---
*Source: [https://tamper.one/outscale](https://tamper.one/outscale) · Start a 30-day free trial at [https://tamper.one/demo](https://tamper.one/demo)*