Skip to content

Commit a6c51e7

Browse files
feat(dlp): update the api
#### dlp:v2 The following keys were added: - schemas.GooglePrivacyDlpV2DiscoveryConfig.properties.processingLocation.$ref (Total Keys: 1) - schemas.GooglePrivacyDlpV2DiscoveryTarget.properties.vertexDatasetTarget.$ref (Total Keys: 1) - schemas.GooglePrivacyDlpV2DiscoveryVertexDatasetConditions (Total Keys: 6) - schemas.GooglePrivacyDlpV2DiscoveryVertexDatasetFilter (Total Keys: 5) - schemas.GooglePrivacyDlpV2DiscoveryVertexDatasetGenerationCadence (Total Keys: 4) - schemas.GooglePrivacyDlpV2FileStoreDataProfile.properties.relatedResources (Total Keys: 2) - schemas.GooglePrivacyDlpV2GlobalProcessing (Total Keys: 2) - schemas.GooglePrivacyDlpV2ImageFallbackLocation (Total Keys: 4) - schemas.GooglePrivacyDlpV2MultiRegionProcessing (Total Keys: 2) - schemas.GooglePrivacyDlpV2ProcessingLocation (Total Keys: 3) - schemas.GooglePrivacyDlpV2RelatedResource (Total Keys: 3) - schemas.GooglePrivacyDlpV2TableDataProfile.properties.relatedResources (Total Keys: 2) - schemas.GooglePrivacyDlpV2VertexDatasetCollection (Total Keys: 3) - schemas.GooglePrivacyDlpV2VertexDatasetDiscoveryTarget (Total Keys: 6) - schemas.GooglePrivacyDlpV2VertexDatasetRegex (Total Keys: 7) - schemas.GooglePrivacyDlpV2VertexDatasetResourceReference (Total Keys: 3)
1 parent f6ebb71 commit a6c51e7

7 files changed

+1014
-8
lines changed

docs/dyn/dlp_v2.organizations.locations.discoveryConfigs.html

Lines changed: 228 additions & 0 deletions
Large diffs are not rendered by default.

docs/dyn/dlp_v2.organizations.locations.fileStoreDataProfiles.html

Lines changed: 88 additions & 2 deletions
Large diffs are not rendered by default.

docs/dyn/dlp_v2.organizations.locations.tableDataProfiles.html

Lines changed: 86 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -277,6 +277,14 @@ <h3>Method Details</h3>
277277
&quot;allAssetInventoryAssets&quot;: True or False, # All AWS assets stored in Asset Inventory that didn&#x27;t match other AWS discovery configs.
278278
},
279279
},
280+
&quot;processingLocation&quot;: { # Configure processing location for discovery and inspection. For example, image OCR is only provided in limited regions but configuring ProcessingLocation will redirect OCR to a location where OCR is provided. # Optional. Processing location configuration. Vertex AI dataset scanning will set processing_location.image_fallback_type to MultiRegionProcessing by default.
281+
&quot;imageFallbackLocation&quot;: { # Configure image processing to fall back to the configured processing option below if unavailable in the request location. # Image processing will fall back using this configuration.
282+
&quot;globalProcessing&quot;: { # Processing will happen in the global region. # Processing will happen in the global region.
283+
},
284+
&quot;multiRegionProcessing&quot;: { # Processing will happen in a multi-region that contains the current region if available. # Processing will happen in a multi-region that contains the current region if available.
285+
},
286+
},
287+
},
280288
&quot;status&quot;: &quot;A String&quot;, # Required. A status for this configuration.
281289
&quot;targets&quot;: [ # Target to match against for determining what to scan and how frequently.
282290
{ # Target used to match against for Discovery.
@@ -474,6 +482,36 @@ <h3>Method Details</h3>
474482
},
475483
&quot;secretsTarget&quot;: { # Discovery target for credentials and secrets in cloud resource metadata. This target does not include any filtering or frequency controls. Cloud DLP will scan cloud resource metadata for secrets daily. No inspect template should be included in the discovery config for a security benchmarks scan. Instead, the built-in list of secrets and credentials infoTypes will be used (see https://cloud.google.com/sensitive-data-protection/docs/infotypes-reference#credentials_and_secrets). Credentials and secrets discovered will be reported as vulnerabilities to Security Command Center. # Discovery target that looks for credentials and secrets stored in cloud resource metadata and reports them as vulnerabilities to Security Command Center. Only one target of this type is allowed.
476484
},
485+
&quot;vertexDatasetTarget&quot;: { # Target used to match against for discovery with Vertex AI datasets. # Vertex AI dataset target for Discovery. The first target to match a dataset will be the one applied. Note that discovery for Vertex AI can incur Cloud Storage Class B operation charges for storage.objects.get operations and retrieval fees. For more information, see [Cloud Storage pricing](https://cloud.google.com/storage/pricing#price-tables). Note that discovery for Vertex AI dataset will not be able to scan images unless DiscoveryConfig.processing_location.image_fallback_location has multi_region_processing or global_processing configured.
486+
&quot;conditions&quot;: { # Requirements that must be true before a dataset is profiled for the first time. # In addition to matching the filter, these conditions must be true before a profile is generated.
487+
&quot;createdAfter&quot;: &quot;A String&quot;, # Vertex AI dataset must have been created after this date. Used to avoid backfilling.
488+
&quot;minAge&quot;: &quot;A String&quot;, # Minimum age a Vertex AI dataset must have. If set, the value must be 1 hour or greater.
489+
},
490+
&quot;disabled&quot;: { # Do not profile the tables. # Disable profiling for datasets that match this filter.
491+
},
492+
&quot;filter&quot;: { # Determines what datasets will have profiles generated within an organization or project. Includes the ability to filter by regular expression patterns on project ID or dataset regex. # Required. The datasets the discovery cadence applies to. The first target with a matching filter will be the one to apply to a dataset.
493+
&quot;collection&quot;: { # Match dataset resources using regex filters. # A specific set of Vertex AI datasets for this filter to apply to.
494+
&quot;vertexDatasetRegexes&quot;: { # A collection of regular expressions to determine what datasets to match against. # The regex used to filter dataset resources.
495+
&quot;patterns&quot;: [ # Required. The group of regular expression patterns to match against one or more datasets. Maximum of 100 entries. The sum of the lengths of all regular expressions can&#x27;t exceed 10 KiB.
496+
{ # A pattern to match against one or more dataset resources.
497+
&quot;projectIdRegex&quot;: &quot;A String&quot;, # For organizations, if unset, will match all projects. Has no effect for configurations created within a project.
498+
},
499+
],
500+
},
501+
},
502+
&quot;others&quot;: { # Match discovery resources not covered by any other filter. # Catch-all. This should always be the last target in the list because anything above it will apply first. Should only appear once in a configuration. If none is specified, a default one will be added automatically.
503+
},
504+
&quot;vertexDatasetResourceReference&quot;: { # Identifies a single Vertex AI dataset. # The dataset resource to scan. Targets including this can only include one target (the target with this dataset resource reference).
505+
&quot;datasetResourceName&quot;: &quot;A String&quot;, # Required. The name of the dataset resource. If set within a project-level configuration, the specified resource must be within the project.
506+
},
507+
},
508+
&quot;generationCadence&quot;: { # How often existing datasets should have their profiles refreshed. New datasets are scanned as quickly as possible depending on system capacity. # How often and when to update profiles. New datasets that match both the filter and conditions are scanned as quickly as possible depending on system capacity.
509+
&quot;inspectTemplateModifiedCadence&quot;: { # The cadence at which to update data profiles when the inspection rules defined by the `InspectTemplate` change. # Governs when to update data profiles when the inspection rules defined by the `InspectTemplate` change. If not set, changing the template will not cause a data profile to be updated.
510+
&quot;frequency&quot;: &quot;A String&quot;, # How frequently data profiles can be updated when the template is modified. Defaults to never.
511+
},
512+
&quot;refreshFrequency&quot;: &quot;A String&quot;, # If you set this field, profiles are refreshed at this frequency regardless of whether the underlying datasets have changed. Defaults to never.
513+
},
514+
},
477515
},
478516
],
479517
&quot;updateTime&quot;: &quot;A String&quot;, # Output only. The last update timestamp of a DiscoveryConfig.
@@ -714,6 +752,11 @@ <h3>Method Details</h3>
714752
&quot;timestamp&quot;: &quot;A String&quot;, # Time when the profile generation status was updated
715753
},
716754
&quot;projectDataProfile&quot;: &quot;A String&quot;, # The resource name of the project data profile for this table.
755+
&quot;relatedResources&quot;: [ # Resources related to this profile.
756+
{ # A related resource. Examples: * The source BigQuery table for a Vertex AI dataset. * The source Cloud Storage bucket for a Vertex AI dataset.
757+
&quot;fullResource&quot;: &quot;A String&quot;, # The full resource name of the related resource.
758+
},
759+
],
717760
&quot;resourceLabels&quot;: { # The labels applied to the resource at the time the profile was generated.
718761
&quot;a_key&quot;: &quot;A String&quot;,
719762
},
@@ -900,6 +943,14 @@ <h3>Method Details</h3>
900943
&quot;allAssetInventoryAssets&quot;: True or False, # All AWS assets stored in Asset Inventory that didn&#x27;t match other AWS discovery configs.
901944
},
902945
},
946+
&quot;processingLocation&quot;: { # Configure processing location for discovery and inspection. For example, image OCR is only provided in limited regions but configuring ProcessingLocation will redirect OCR to a location where OCR is provided. # Optional. Processing location configuration. Vertex AI dataset scanning will set processing_location.image_fallback_type to MultiRegionProcessing by default.
947+
&quot;imageFallbackLocation&quot;: { # Configure image processing to fall back to the configured processing option below if unavailable in the request location. # Image processing will fall back using this configuration.
948+
&quot;globalProcessing&quot;: { # Processing will happen in the global region. # Processing will happen in the global region.
949+
},
950+
&quot;multiRegionProcessing&quot;: { # Processing will happen in a multi-region that contains the current region if available. # Processing will happen in a multi-region that contains the current region if available.
951+
},
952+
},
953+
},
903954
&quot;status&quot;: &quot;A String&quot;, # Required. A status for this configuration.
904955
&quot;targets&quot;: [ # Target to match against for determining what to scan and how frequently.
905956
{ # Target used to match against for Discovery.
@@ -1097,6 +1148,36 @@ <h3>Method Details</h3>
10971148
},
10981149
&quot;secretsTarget&quot;: { # Discovery target for credentials and secrets in cloud resource metadata. This target does not include any filtering or frequency controls. Cloud DLP will scan cloud resource metadata for secrets daily. No inspect template should be included in the discovery config for a security benchmarks scan. Instead, the built-in list of secrets and credentials infoTypes will be used (see https://cloud.google.com/sensitive-data-protection/docs/infotypes-reference#credentials_and_secrets). Credentials and secrets discovered will be reported as vulnerabilities to Security Command Center. # Discovery target that looks for credentials and secrets stored in cloud resource metadata and reports them as vulnerabilities to Security Command Center. Only one target of this type is allowed.
10991150
},
1151+
&quot;vertexDatasetTarget&quot;: { # Target used to match against for discovery with Vertex AI datasets. # Vertex AI dataset target for Discovery. The first target to match a dataset will be the one applied. Note that discovery for Vertex AI can incur Cloud Storage Class B operation charges for storage.objects.get operations and retrieval fees. For more information, see [Cloud Storage pricing](https://cloud.google.com/storage/pricing#price-tables). Note that discovery for Vertex AI dataset will not be able to scan images unless DiscoveryConfig.processing_location.image_fallback_location has multi_region_processing or global_processing configured.
1152+
&quot;conditions&quot;: { # Requirements that must be true before a dataset is profiled for the first time. # In addition to matching the filter, these conditions must be true before a profile is generated.
1153+
&quot;createdAfter&quot;: &quot;A String&quot;, # Vertex AI dataset must have been created after this date. Used to avoid backfilling.
1154+
&quot;minAge&quot;: &quot;A String&quot;, # Minimum age a Vertex AI dataset must have. If set, the value must be 1 hour or greater.
1155+
},
1156+
&quot;disabled&quot;: { # Do not profile the tables. # Disable profiling for datasets that match this filter.
1157+
},
1158+
&quot;filter&quot;: { # Determines what datasets will have profiles generated within an organization or project. Includes the ability to filter by regular expression patterns on project ID or dataset regex. # Required. The datasets the discovery cadence applies to. The first target with a matching filter will be the one to apply to a dataset.
1159+
&quot;collection&quot;: { # Match dataset resources using regex filters. # A specific set of Vertex AI datasets for this filter to apply to.
1160+
&quot;vertexDatasetRegexes&quot;: { # A collection of regular expressions to determine what datasets to match against. # The regex used to filter dataset resources.
1161+
&quot;patterns&quot;: [ # Required. The group of regular expression patterns to match against one or more datasets. Maximum of 100 entries. The sum of the lengths of all regular expressions can&#x27;t exceed 10 KiB.
1162+
{ # A pattern to match against one or more dataset resources.
1163+
&quot;projectIdRegex&quot;: &quot;A String&quot;, # For organizations, if unset, will match all projects. Has no effect for configurations created within a project.
1164+
},
1165+
],
1166+
},
1167+
},
1168+
&quot;others&quot;: { # Match discovery resources not covered by any other filter. # Catch-all. This should always be the last target in the list because anything above it will apply first. Should only appear once in a configuration. If none is specified, a default one will be added automatically.
1169+
},
1170+
&quot;vertexDatasetResourceReference&quot;: { # Identifies a single Vertex AI dataset. # The dataset resource to scan. Targets including this can only include one target (the target with this dataset resource reference).
1171+
&quot;datasetResourceName&quot;: &quot;A String&quot;, # Required. The name of the dataset resource. If set within a project-level configuration, the specified resource must be within the project.
1172+
},
1173+
},
1174+
&quot;generationCadence&quot;: { # How often existing datasets should have their profiles refreshed. New datasets are scanned as quickly as possible depending on system capacity. # How often and when to update profiles. New datasets that match both the filter and conditions are scanned as quickly as possible depending on system capacity.
1175+
&quot;inspectTemplateModifiedCadence&quot;: { # The cadence at which to update data profiles when the inspection rules defined by the `InspectTemplate` change. # Governs when to update data profiles when the inspection rules defined by the `InspectTemplate` change. If not set, changing the template will not cause a data profile to be updated.
1176+
&quot;frequency&quot;: &quot;A String&quot;, # How frequently data profiles can be updated when the template is modified. Defaults to never.
1177+
},
1178+
&quot;refreshFrequency&quot;: &quot;A String&quot;, # If you set this field, profiles are refreshed at this frequency regardless of whether the underlying datasets have changed. Defaults to never.
1179+
},
1180+
},
11001181
},
11011182
],
11021183
&quot;updateTime&quot;: &quot;A String&quot;, # Output only. The last update timestamp of a DiscoveryConfig.
@@ -1337,6 +1418,11 @@ <h3>Method Details</h3>
13371418
&quot;timestamp&quot;: &quot;A String&quot;, # Time when the profile generation status was updated
13381419
},
13391420
&quot;projectDataProfile&quot;: &quot;A String&quot;, # The resource name of the project data profile for this table.
1421+
&quot;relatedResources&quot;: [ # Resources related to this profile.
1422+
{ # A related resource. Examples: * The source BigQuery table for a Vertex AI dataset. * The source Cloud Storage bucket for a Vertex AI dataset.
1423+
&quot;fullResource&quot;: &quot;A String&quot;, # The full resource name of the related resource.
1424+
},
1425+
],
13401426
&quot;resourceLabels&quot;: { # The labels applied to the resource at the time the profile was generated.
13411427
&quot;a_key&quot;: &quot;A String&quot;,
13421428
},

0 commit comments

Comments
 (0)