google-cloud-dlp-v2 1.14.0 → 1.15.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -738,6 +738,25 @@ module Google
738
738
  # @!attribute [rw] byte_item
739
739
  # @return [::Google::Cloud::Dlp::V2::ByteContentItem]
740
740
  # The content must be PNG, JPEG, SVG or BMP.
741
+ # @!attribute [rw] inspect_template
742
+ # @return [::String]
743
+ # The full resource name of the inspection template to use. Settings in the
744
+ # main `inspect_config` field override the corresponding settings in this
745
+ # inspection template.
746
+ #
747
+ # The merge behavior is as follows:
748
+ #
749
+ # - Singular field: The main field's value replaces the value of the
750
+ # corresponding field in the template.
751
+ # - Repeated fields: The field values are appended to the list defined in
752
+ # the template.
753
+ # - Sub-messages and groups: The fields are recursively merged.
754
+ # @!attribute [rw] deidentify_template
755
+ # @return [::String]
756
+ # The full resource name of the de-identification template to use. Settings
757
+ # in the main `image_redaction_configs` field override the corresponding
758
+ # settings in this de-identification template. The request fails if the
759
+ # type of the template's deidentify_config is not image_transformations.
741
760
  class RedactImageRequest
742
761
  include ::Google::Protobuf::MessageExts
743
762
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1012,6 +1031,23 @@ module Google
1012
1031
  # metric and quasi-identifiers. Risk jobs that analyze the same table but
1013
1032
  # compute a different privacy metric, or use different sets of
1014
1033
  # quasi-identifiers, cannot store their results in the same table.
1034
+ #
1035
+ # Note: The following fields are mutually exclusive: `table`, `storage_path`. If a field in that set is populated, all other fields in the set will automatically be cleared.
1036
+ # @!attribute [rw] storage_path
1037
+ # @return [::Google::Cloud::Dlp::V2::CloudStoragePath]
1038
+ # Store findings in an existing Cloud Storage bucket. Files will be
1039
+ # generated with the job ID and file part number as the filename and will
1040
+ # contain findings in textproto format as
1041
+ # {::Google::Cloud::Dlp::V2::SaveToGcsFindingsOutput SaveToGcsFindingsOutput}.
1042
+ # The filename will follow the naming convention `<job_id>-<shard_number>`.
1043
+ # Example: `my-job-id-2`.
1044
+ #
1045
+ # Supported for {::Google::Cloud::Dlp::V2::InspectJobConfig Inspect jobs}. The
1046
+ # bucket must not be the same as the bucket being inspected. If storing
1047
+ # findings to Cloud Storage, the output schema field should not be set. If
1048
+ # set, it will be ignored.
1049
+ #
1050
+ # Note: The following fields are mutually exclusive: `storage_path`, `table`. If a field in that set is populated, all other fields in the set will automatically be cleared.
1015
1051
  # @!attribute [rw] output_schema
1016
1052
  # @return [::Google::Cloud::Dlp::V2::OutputStorageConfig::OutputSchema]
1017
1053
  # Schema used for writing the findings for Inspect jobs. This field is only
@@ -3576,39 +3612,44 @@ module Google
3576
3612
  # @return [::Google::Cloud::Dlp::V2::Action::SaveFindings]
3577
3613
  # Save resulting findings in a provided location.
3578
3614
  #
3579
- # Note: The following fields are mutually exclusive: `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `deidentify`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3615
+ # Note: The following fields are mutually exclusive: `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `publish_findings_to_dataplex_catalog`, `deidentify`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3580
3616
  # @!attribute [rw] pub_sub
3581
3617
  # @return [::Google::Cloud::Dlp::V2::Action::PublishToPubSub]
3582
3618
  # Publish a notification to a Pub/Sub topic.
3583
3619
  #
3584
- # Note: The following fields are mutually exclusive: `pub_sub`, `save_findings`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `deidentify`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3620
+ # Note: The following fields are mutually exclusive: `pub_sub`, `save_findings`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `publish_findings_to_dataplex_catalog`, `deidentify`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3585
3621
  # @!attribute [rw] publish_summary_to_cscc
3586
3622
  # @return [::Google::Cloud::Dlp::V2::Action::PublishSummaryToCscc]
3587
3623
  # Publish summary to Cloud Security Command Center (Alpha).
3588
3624
  #
3589
- # Note: The following fields are mutually exclusive: `publish_summary_to_cscc`, `save_findings`, `pub_sub`, `publish_findings_to_cloud_data_catalog`, `deidentify`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3625
+ # Note: The following fields are mutually exclusive: `publish_summary_to_cscc`, `save_findings`, `pub_sub`, `publish_findings_to_cloud_data_catalog`, `publish_findings_to_dataplex_catalog`, `deidentify`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3590
3626
  # @!attribute [rw] publish_findings_to_cloud_data_catalog
3591
3627
  # @return [::Google::Cloud::Dlp::V2::Action::PublishFindingsToCloudDataCatalog]
3592
3628
  # Publish findings to Cloud Datahub.
3593
3629
  #
3594
- # Note: The following fields are mutually exclusive: `publish_findings_to_cloud_data_catalog`, `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `deidentify`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3630
+ # Note: The following fields are mutually exclusive: `publish_findings_to_cloud_data_catalog`, `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_dataplex_catalog`, `deidentify`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3631
+ # @!attribute [rw] publish_findings_to_dataplex_catalog
3632
+ # @return [::Google::Cloud::Dlp::V2::Action::PublishFindingsToDataplexCatalog]
3633
+ # Publish findings as an aspect to Dataplex Universal Catalog.
3634
+ #
3635
+ # Note: The following fields are mutually exclusive: `publish_findings_to_dataplex_catalog`, `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `deidentify`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3595
3636
  # @!attribute [rw] deidentify
3596
3637
  # @return [::Google::Cloud::Dlp::V2::Action::Deidentify]
3597
3638
  # Create a de-identified copy of the input data.
3598
3639
  #
3599
- # Note: The following fields are mutually exclusive: `deidentify`, `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3640
+ # Note: The following fields are mutually exclusive: `deidentify`, `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `publish_findings_to_dataplex_catalog`, `job_notification_emails`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3600
3641
  # @!attribute [rw] job_notification_emails
3601
3642
  # @return [::Google::Cloud::Dlp::V2::Action::JobNotificationEmails]
3602
3643
  # Sends an email when the job completes. The email goes to IAM project
3603
3644
  # owners and technical [Essential
3604
3645
  # Contacts](https://cloud.google.com/resource-manager/docs/managing-notification-contacts).
3605
3646
  #
3606
- # Note: The following fields are mutually exclusive: `job_notification_emails`, `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `deidentify`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3647
+ # Note: The following fields are mutually exclusive: `job_notification_emails`, `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `publish_findings_to_dataplex_catalog`, `deidentify`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3607
3648
  # @!attribute [rw] publish_to_stackdriver
3608
3649
  # @return [::Google::Cloud::Dlp::V2::Action::PublishToStackdriver]
3609
3650
  # Enable Stackdriver metric dlp.googleapis.com/finding_count.
3610
3651
  #
3611
- # Note: The following fields are mutually exclusive: `publish_to_stackdriver`, `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `deidentify`, `job_notification_emails`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3652
+ # Note: The following fields are mutually exclusive: `publish_to_stackdriver`, `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `publish_findings_to_dataplex_catalog`, `deidentify`, `job_notification_emails`. If a field in that set is populated, all other fields in the set will automatically be cleared.
3612
3653
  class Action
3613
3654
  include ::Google::Protobuf::MessageExts
3614
3655
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -3677,6 +3718,24 @@ module Google
3677
3718
  extend ::Google::Protobuf::MessageExts::ClassMethods
3678
3719
  end
3679
3720
 
3721
+ # Publish findings of a DlpJob to Dataplex Universal Catalog as a
3722
+ # `sensitive-data-protection-job-result` aspect. For more information,
3723
+ # see [Send inspection results to Dataplex Universal Catalog as
3724
+ # aspects](https://cloud.google.com/sensitive-data-protection/docs/add-aspects-inspection-job).
3725
+ #
3726
+ # Aspects are stored in Dataplex Universal Catalog storage and are
3727
+ # governed by service-specific policies for Dataplex Universal Catalog. For
3728
+ # more information, see [Service Specific
3729
+ # Terms](https://cloud.google.com/terms/service-terms).
3730
+ #
3731
+ # Only a single instance of this action can be specified. This action is
3732
+ # allowed only if all resources being scanned are BigQuery tables.
3733
+ # Compatible with: Inspect
3734
+ class PublishFindingsToDataplexCatalog
3735
+ include ::Google::Protobuf::MessageExts
3736
+ extend ::Google::Protobuf::MessageExts::ClassMethods
3737
+ end
3738
+
3680
3739
  # Create a de-identified copy of a storage bucket. Only compatible
3681
3740
  # with Cloud Storage buckets.
3682
3741
  #
@@ -4269,6 +4328,8 @@ module Google
4269
4328
  # - 'error_count' - Number of errors that have occurred while running.
4270
4329
  # * The operator must be `=` or `!=` for status and inspected_storage.
4271
4330
  #
4331
+ # The syntax is based on https://google.aip.dev/160.
4332
+ #
4272
4333
  # Examples:
4273
4334
  #
4274
4335
  # * inspected_storage = cloud_storage AND status = HEALTHY
@@ -4362,8 +4423,8 @@ module Google
4362
4423
  # Note: The following fields are mutually exclusive: `tag_resources`, `export_data`, `pub_sub_notification`, `publish_to_chronicle`, `publish_to_scc`, `publish_to_dataplex_catalog`. If a field in that set is populated, all other fields in the set will automatically be cleared.
4363
4424
  # @!attribute [rw] publish_to_dataplex_catalog
4364
4425
  # @return [::Google::Cloud::Dlp::V2::DataProfileAction::PublishToDataplexCatalog]
4365
- # Publishes a portion of each profile to Dataplex Catalog with the aspect
4366
- # type Sensitive Data Protection Profile.
4426
+ # Publishes a portion of each profile to Dataplex Universal Catalog with
4427
+ # the aspect type Sensitive Data Protection Profile.
4367
4428
  #
4368
4429
  # Note: The following fields are mutually exclusive: `publish_to_dataplex_catalog`, `export_data`, `pub_sub_notification`, `publish_to_chronicle`, `publish_to_scc`, `tag_resources`. If a field in that set is populated, all other fields in the set will automatically be cleared.
4369
4430
  class DataProfileAction
@@ -4467,16 +4528,17 @@ module Google
4467
4528
  extend ::Google::Protobuf::MessageExts::ClassMethods
4468
4529
  end
4469
4530
 
4470
- # Create Dataplex Catalog aspects for profiled resources with the aspect type
4471
- # Sensitive Data Protection Profile. To learn more about aspects, see
4472
- # https://cloud.google.com/sensitive-data-protection/docs/add-aspects.
4531
+ # Create Dataplex Universal Catalog aspects for profiled resources with the
4532
+ # aspect type Sensitive Data Protection Profile. To learn more about aspects,
4533
+ # see https://cloud.google.com/sensitive-data-protection/docs/add-aspects.
4473
4534
  # @!attribute [rw] lower_data_risk_to_low
4474
4535
  # @return [::Boolean]
4475
- # Whether creating a Dataplex Catalog aspect for a profiled resource should
4476
- # lower the risk of the profile for that resource. This also lowers the
4477
- # data risk of resources at the lower levels of the resource hierarchy. For
4478
- # example, reducing the data risk of a table data profile also reduces the
4479
- # data risk of the constituent column data profiles.
4536
+ # Whether creating a Dataplex Universal Catalog aspect for a profiled
4537
+ # resource should lower the risk of the profile for that resource. This
4538
+ # also lowers the data risk of resources at the lower levels of the
4539
+ # resource hierarchy. For example, reducing the data risk of a table data
4540
+ # profile also reduces the data risk of the constituent column data
4541
+ # profiles.
4480
4542
  class PublishToDataplexCatalog
4481
4543
  include ::Google::Protobuf::MessageExts
4482
4544
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -4532,7 +4594,8 @@ module Google
4532
4594
  # @return [::String]
4533
4595
  # The namespaced name for the tag value to attach to resources. Must be
4534
4596
  # in the format `{parent_id}/{tag_key_short_name}/{short_name}`, for
4535
- # example, "123456/environment/prod".
4597
+ # example, "123456/environment/prod" for an organization parent, or
4598
+ # "my-project/environment/prod" for a project parent.
4536
4599
  class TagValue
4537
4600
  include ::Google::Protobuf::MessageExts
4538
4601
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -5363,6 +5426,18 @@ module Google
5363
5426
  # @return [::Google::Cloud::Dlp::V2::FileStoreRegexes]
5364
5427
  # Optional. A collection of regular expressions to match a file store
5365
5428
  # against.
5429
+ # @!attribute [rw] include_tags
5430
+ # @return [::Google::Cloud::Dlp::V2::TagFilters]
5431
+ # Optional. To be included in the collection, a resource must meet all of the
5432
+ # following requirements:
5433
+ #
5434
+ # - If tag filters are provided, match all provided tag filters.
5435
+ # - If one or more patterns are specified, match at least one pattern.
5436
+ #
5437
+ # For a resource to match the tag filters, the resource must have all of the
5438
+ # provided tags attached. Tags refer to Resource Manager tags bound to the
5439
+ # resource or its ancestors. For more information, see [Manage
5440
+ # schedules](https://cloud.google.com/sensitive-data-protection/docs/profile-project-cloud-storage#manage-schedules).
5366
5441
  class FileStoreCollection
5367
5442
  include ::Google::Protobuf::MessageExts
5368
5443
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -6064,6 +6139,8 @@ module Google
6064
6139
  # - 'start_time` - Corresponds to the time the job finished.
6065
6140
  # * The operator must be `=` or `!=`.
6066
6141
  #
6142
+ # The syntax is based on https://google.aip.dev/160.
6143
+ #
6067
6144
  # Examples:
6068
6145
  #
6069
6146
  # * inspected_storage = cloud_storage AND state = done
@@ -6686,13 +6763,13 @@ module Google
6686
6763
  # * `project_id`
6687
6764
  # * `sensitivity_level desc`
6688
6765
  #
6689
- # Supported fields are:
6766
+ # Supported fields:
6690
6767
  #
6691
6768
  # - `project_id`: Google Cloud project ID
6692
- # - `sensitivity_level`: How sensitive the data in a project is, at most.
6693
- # - `data_risk_level`: How much risk is associated with this data.
6694
- # - `profile_last_generated`: When the profile was last updated in epoch
6695
- # seconds.
6769
+ # - `sensitivity_level`: How sensitive the data in a project is, at most
6770
+ # - `data_risk_level`: How much risk is associated with this data
6771
+ # - `profile_last_generated`: Date and time (in epoch seconds) the profile
6772
+ # was last generated
6696
6773
  # @!attribute [rw] filter
6697
6774
  # @return [::String]
6698
6775
  # Allows filtering.
@@ -6703,17 +6780,24 @@ module Google
6703
6780
  # * Restrictions can be combined by `AND` or `OR` logical operators. A
6704
6781
  # sequence of restrictions implicitly uses `AND`.
6705
6782
  # * A restriction has the form of `{field} {operator} {value}`.
6706
- # * Supported fields/values:
6707
- # - `sensitivity_level` - HIGH|MODERATE|LOW
6708
- # - `data_risk_level` - HIGH|MODERATE|LOW
6709
- # - `status_code` - an RPC status code as defined in
6783
+ # * Supported fields:
6784
+ # - `project_id`: the Google Cloud project ID
6785
+ # - `sensitivity_level`: HIGH|MODERATE|LOW
6786
+ # - `data_risk_level`: HIGH|MODERATE|LOW
6787
+ # - `status_code`: an RPC status code as defined in
6710
6788
  # https://github.com/googleapis/googleapis/blob/master/google/rpc/code.proto
6711
- # * The operator must be `=` or `!=`.
6789
+ # - `profile_last_generated`: Date and time the profile was last
6790
+ # generated
6791
+ # * The operator must be `=` or `!=`. The `profile_last_generated` filter
6792
+ # also supports `<` and `>`.
6793
+ #
6794
+ # The syntax is based on https://google.aip.dev/160.
6712
6795
  #
6713
6796
  # Examples:
6714
6797
  #
6715
6798
  # * `project_id = 12345 AND status_code = 1`
6716
6799
  # * `project_id = 12345 AND sensitivity_level = HIGH`
6800
+ # * `profile_last_generated < "2025-01-01T00:00:00.000Z"`
6717
6801
  #
6718
6802
  # The length of this field should be no more than 500 characters.
6719
6803
  class ListProjectDataProfilesRequest
@@ -6780,23 +6864,29 @@ module Google
6780
6864
  # * Restrictions can be combined by `AND` or `OR` logical operators. A
6781
6865
  # sequence of restrictions implicitly uses `AND`.
6782
6866
  # * A restriction has the form of `{field} {operator} {value}`.
6783
- # * Supported fields/values:
6784
- # - `project_id` - The Google Cloud project ID.
6785
- # - `dataset_id` - The BigQuery dataset ID.
6786
- # - `table_id` - The ID of the BigQuery table.
6787
- # - `sensitivity_level` - HIGH|MODERATE|LOW
6788
- # - `data_risk_level` - HIGH|MODERATE|LOW
6867
+ # * Supported fields:
6868
+ # - `project_id`: The Google Cloud project ID
6869
+ # - `dataset_id`: The BigQuery dataset ID
6870
+ # - `table_id`: The ID of the BigQuery table
6871
+ # - `sensitivity_level`: HIGH|MODERATE|LOW
6872
+ # - `data_risk_level`: HIGH|MODERATE|LOW
6789
6873
  # - `resource_visibility`: PUBLIC|RESTRICTED
6790
- # - `status_code` - an RPC status code as defined in
6874
+ # - `status_code`: an RPC status code as defined in
6791
6875
  # https://github.com/googleapis/googleapis/blob/master/google/rpc/code.proto
6876
+ # - `profile_last_generated`: Date and time the profile was last
6877
+ # generated
6792
6878
  #
6793
- # * The operator must be `=` or `!=`.
6879
+ # * The operator must be `=` or `!=`. The `profile_last_generated` filter
6880
+ # also supports `<` and `>`.
6881
+ #
6882
+ # The syntax is based on https://google.aip.dev/160.
6794
6883
  #
6795
6884
  # Examples:
6796
6885
  #
6797
6886
  # * `project_id = 12345 AND status_code = 1`
6798
6887
  # * `project_id = 12345 AND sensitivity_level = HIGH`
6799
6888
  # * `project_id = 12345 AND resource_visibility = PUBLIC`
6889
+ # * `profile_last_generated < "2025-01-01T00:00:00.000Z"`
6800
6890
  #
6801
6891
  # The length of this field should be no more than 500 characters.
6802
6892
  class ListTableDataProfilesRequest
@@ -6861,26 +6951,32 @@ module Google
6861
6951
  # * Restrictions can be combined by `AND` or `OR` logical operators. A
6862
6952
  # sequence of restrictions implicitly uses `AND`.
6863
6953
  # * A restriction has the form of `{field} {operator} {value}`.
6864
- # * Supported fields/values:
6865
- # - `table_data_profile_name` - The name of the related table data
6866
- # profile.
6867
- # - `project_id` - The Google Cloud project ID. (REQUIRED)
6868
- # - `dataset_id` - The BigQuery dataset ID. (REQUIRED)
6869
- # - `table_id` - The BigQuery table ID. (REQUIRED)
6870
- # - `field_id` - The ID of the BigQuery field.
6871
- # - `info_type` - The infotype detected in the resource.
6872
- # - `sensitivity_level` - HIGH|MEDIUM|LOW
6873
- # - `data_risk_level`: How much risk is associated with this data.
6874
- # - `status_code` - an RPC status code as defined in
6954
+ # * Supported fields:
6955
+ # - `table_data_profile_name`: The name of the related table data
6956
+ # profile
6957
+ # - `project_id`: The Google Cloud project ID (REQUIRED)
6958
+ # - `dataset_id`: The BigQuery dataset ID (REQUIRED)
6959
+ # - `table_id`: The BigQuery table ID (REQUIRED)
6960
+ # - `field_id`: The ID of the BigQuery field
6961
+ # - `info_type`: The infotype detected in the resource
6962
+ # - `sensitivity_level`: HIGH|MEDIUM|LOW
6963
+ # - `data_risk_level`: How much risk is associated with this data
6964
+ # - `status_code`: An RPC status code as defined in
6875
6965
  # https://github.com/googleapis/googleapis/blob/master/google/rpc/code.proto
6966
+ # - `profile_last_generated`: Date and time the profile was last
6967
+ # generated
6876
6968
  # * The operator must be `=` for project_id, dataset_id, and table_id. Other
6877
- # filters also support `!=`.
6969
+ # filters also support `!=`. The `profile_last_generated` filter also
6970
+ # supports `<` and `>`.
6971
+ #
6972
+ # The syntax is based on https://google.aip.dev/160.
6878
6973
  #
6879
6974
  # Examples:
6880
6975
  #
6881
6976
  # * project_id = 12345 AND status_code = 1
6882
6977
  # * project_id = 12345 AND sensitivity_level = HIGH
6883
6978
  # * project_id = 12345 AND info_type = STREET_ADDRESS
6979
+ # * profile_last_generated < "2025-01-01T00:00:00.000Z"
6884
6980
  #
6885
6981
  # The length of this field should be no more than 500 characters.
6886
6982
  class ListColumnDataProfilesRequest
@@ -7480,8 +7576,9 @@ module Google
7480
7576
  # @return [::String]
7481
7577
  # The namespaced name for the tag value to attach to Google Cloud resources.
7482
7578
  # Must be in the format `{parent_id}/{tag_key_short_name}/{short_name}`, for
7483
- # example, "123456/environment/prod". This is only set for Google Cloud
7484
- # resources.
7579
+ # example, "123456/environment/prod" for an organization parent, or
7580
+ # "my-project/environment/prod" for a project parent. This is only set for
7581
+ # Google Cloud resources.
7485
7582
  # @!attribute [rw] key
7486
7583
  # @return [::String]
7487
7584
  # The key of a tag key-value pair. For Google Cloud resources, this is the
@@ -7495,6 +7592,37 @@ module Google
7495
7592
  extend ::Google::Protobuf::MessageExts::ClassMethods
7496
7593
  end
7497
7594
 
7595
+ # Tags to match against for filtering.
7596
+ # @!attribute [rw] tag_filters
7597
+ # @return [::Array<::Google::Cloud::Dlp::V2::TagFilter>]
7598
+ # Required. A resource must match ALL of the specified tag filters to be
7599
+ # included in the collection.
7600
+ class TagFilters
7601
+ include ::Google::Protobuf::MessageExts
7602
+ extend ::Google::Protobuf::MessageExts::ClassMethods
7603
+ end
7604
+
7605
+ # A single tag to filter against.
7606
+ # @!attribute [rw] namespaced_tag_value
7607
+ # @return [::String]
7608
+ # The namespaced name for the tag value. Must be in the format
7609
+ # `{parent_id}/{tag_key_short_name}/{short_name}`, for example,
7610
+ # "123456/environment/prod" for an organization parent, or
7611
+ # "my-project/environment/prod" for a project parent.
7612
+ #
7613
+ # Note: The following fields are mutually exclusive: `namespaced_tag_value`, `namespaced_tag_key`. If a field in that set is populated, all other fields in the set will automatically be cleared.
7614
+ # @!attribute [rw] namespaced_tag_key
7615
+ # @return [::String]
7616
+ # The namespaced name for the tag key. Must be in the format
7617
+ # `{parent_id}/{tag_key_short_name}`, for example, "123456/sensitive" for
7618
+ # an organization parent, or "my-project/sensitive" for a project parent.
7619
+ #
7620
+ # Note: The following fields are mutually exclusive: `namespaced_tag_key`, `namespaced_tag_value`. If a field in that set is populated, all other fields in the set will automatically be cleared.
7621
+ class TagFilter
7622
+ include ::Google::Protobuf::MessageExts
7623
+ extend ::Google::Protobuf::MessageExts::ClassMethods
7624
+ end
7625
+
7498
7626
  # A related resource.
7499
7627
  # Examples:
7500
7628
  #
@@ -7632,21 +7760,26 @@ module Google
7632
7760
  # * Restrictions can be combined by `AND` or `OR` logical operators. A
7633
7761
  # sequence of restrictions implicitly uses `AND`.
7634
7762
  # * A restriction has the form of `{field} {operator} {value}`.
7635
- # * Supported fields/values:
7636
- # - `project_id` - The Google Cloud project ID.
7637
- # - `account_id` - The AWS account ID.
7638
- # - `file_store_path` - The path like "gs://bucket".
7639
- # - `data_source_type` - The profile's data source type, like
7640
- # "google/storage/bucket".
7641
- # - `data_storage_location` - The location where the file store's data is
7642
- # stored, like "us-central1".
7643
- # - `sensitivity_level` - HIGH|MODERATE|LOW
7644
- # - `data_risk_level` - HIGH|MODERATE|LOW
7763
+ # * Supported fields:
7764
+ # - `project_id`: The Google Cloud project ID
7765
+ # - `account_id`: The AWS account ID
7766
+ # - `file_store_path`: The path like "gs://bucket"
7767
+ # - `data_source_type`: The profile's data source type, like
7768
+ # "google/storage/bucket"
7769
+ # - `data_storage_location`: The location where the file store's data is
7770
+ # stored, like "us-central1"
7771
+ # - `sensitivity_level`: HIGH|MODERATE|LOW
7772
+ # - `data_risk_level`: HIGH|MODERATE|LOW
7645
7773
  # - `resource_visibility`: PUBLIC|RESTRICTED
7646
- # - `status_code` - an RPC status code as defined in
7774
+ # - `status_code`: an RPC status code as defined in
7647
7775
  # https://github.com/googleapis/googleapis/blob/master/google/rpc/code.proto
7776
+ # - `profile_last_generated`: Date and time the profile was last
7777
+ # generated
7648
7778
  #
7649
- # * The operator must be `=` or `!=`.
7779
+ # * The operator must be `=` or `!=`. The `profile_last_generated` filter
7780
+ # also supports `<` and `>`.
7781
+ #
7782
+ # The syntax is based on https://google.aip.dev/160.
7650
7783
  #
7651
7784
  # Examples:
7652
7785
  #
@@ -7654,6 +7787,7 @@ module Google
7654
7787
  # * `project_id = 12345 AND sensitivity_level = HIGH`
7655
7788
  # * `project_id = 12345 AND resource_visibility = PUBLIC`
7656
7789
  # * `file_store_path = "gs://mybucket"`
7790
+ # * `profile_last_generated < "2025-01-01T00:00:00.000Z"`
7657
7791
  #
7658
7792
  # The length of this field should be no more than 500 characters.
7659
7793
  class ListFileStoreDataProfilesRequest
@@ -7831,6 +7965,8 @@ module Google
7831
7965
  # @!attribute [rw] filter
7832
7966
  # @return [::String]
7833
7967
  # Optional. Supported field/value: `state` - MISSING|AVAILABLE|ERROR
7968
+ #
7969
+ # The syntax is based on https://google.aip.dev/160.
7834
7970
  class ListConnectionsRequest
7835
7971
  include ::Google::Protobuf::MessageExts
7836
7972
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -7852,6 +7988,8 @@ module Google
7852
7988
  # @!attribute [rw] filter
7853
7989
  # @return [::String]
7854
7990
  # Optional. Supported field/value: - `state` - MISSING|AVAILABLE|ERROR
7991
+ #
7992
+ # The syntax is based on https://google.aip.dev/160.
7855
7993
  class SearchConnectionsRequest
7856
7994
  include ::Google::Protobuf::MessageExts
7857
7995
  extend ::Google::Protobuf::MessageExts::ClassMethods
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-cloud-dlp-v2
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.14.0
4
+ version: 1.15.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC