Blog Post

Microsoft Security Community Blog
10 MIN READ

Leverage Microsoft Cloud App Security to apply Azure Information Protection labels in the cloud

Nir Hendler's avatar
Nir Hendler
Icon for Microsoft rankMicrosoft
Mar 26, 2019
Azure Information Protection labels are designed to apply a classification, and (optionally) mark and encrypt the document based on the level of sensitive information it contains. Customers who mainl...
Updated May 11, 2021
Version 6.0
information protection and governance
microsoft information protection
Ashish Trivedi's avatar
Ashish Trivedi
Brass Contributor
Jun 11, 2019

Hi Nir Hendler , thank you for the blog post.

This is relating to what we are trying to achieve. We would like to label files using AIP (using conditions to auto label files). Then when someone try to downgrade AIP label and move to a personal storage or email, we want to block the upload of file using the dynamic content inspection.

Based on your blog, I got quick questions - 

1. As mentioned in Step 6 of File Policy, I can't see the AIP labels created. Do I have to publish them through my compliance portal?

2. Also, in Session Policy, I don't see any value under Session control type drop down. [I have not created any session setting in any conditional access policy].

This is a green field project and data is not yet migrated. So there is no file with AIP labels. Could you please direct me how do I achieve the blocking on file upload in personal storage or emails using CAS + WIP/AIP?