ITAR 的数据边界
支持的服务
下表列出了符合 ITAR 数据边界要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
支持合规性的区域
Cloud DNS 适用于以下 Google Cloud 区域中符合 ITAR 要求的 Data Boundary:
- us-central1
- us-central2
- us-east1
- us-east4
- us-east5
- us-south1
- us-west1
- us-west2
- us-west3
- us-west4
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
AW 区域控制 - 印度数据边界
支持的服务
下表列出了符合 AW 区域控制 - 印度数据边界要求的 Cloud DNS API 及其版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
AW 区域控制 - 高级版 - 澳大利亚数据边界与支持
支持的服务
下表列出了符合 AW 区域控制 - 高级版 - 澳大利亚数据边界和支持要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
AW 区域控制 - 高级版 - 加拿大数据边界和支持
支持的服务
下表列出了符合 AW Regional Controls - Premium - Canada Data Boundary and Support 要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
AW 区域控制 - 高级版 - 欧盟数据边界和支持
支持的服务
下表列出了符合 AW 区域控制 - 高级版 - 欧盟数据边界和支持要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
AW 区域控制 - 高级版 - 以色列数据边界和支持
支持的服务
下表列出了符合 AW 区域控制 - 高级版 - 以色列数据边界和支持要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
AW 区域控制 - 高级版 - 日本数据边界
支持的服务
下表列出了符合 AW 区域控制 - 高级版 - 日本数据边界要求的 Cloud DNS API 及其版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
AW 区域控制 - 高级版 - 美国数据边界和支持
支持的服务
下表列出了符合 AW 区域控制 - 高级版 - 美国数据边界和支持要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
CJIS 的数据边界
支持的服务
下表列出了符合 CJIS 数据边界要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
加拿大管制商品的数据边界
支持的服务
下表列出了符合加拿大管制商品数据边界要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
加拿大 Protected B 的数据边界
支持的服务
下表列出了符合加拿大 Protected B 数据边界要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
FedRAMP 高风险级别的数据边界
支持的服务
下表列出了符合 FedRAMP 高风险级别数据边界要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
FedRAMP 中风险级别的数据边界
支持的服务
下表列出了符合 FedRAMP 中风险级别数据边界要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
IRS 1075 号法规的数据边界
支持的服务
下表列出了符合 IRS 1075 号法规的数据边界要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
影响级别 2 (IL2) 的数据边界
支持的服务
下表列出了符合影响级别 2 (IL2) 数据边界要求的 Cloud DNS API 及其版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
影响级别 4 (IL4) 的数据边界
支持的服务
下表列出了符合影响级别 4 (IL4) 的数据边界要求的 Cloud DNS API 及其版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
影响级别 5 (IL5) 的数据边界
支持的服务
下表列出了符合影响级别 5 (IL5) 数据边界要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
欧盟数据边界与访问理由
支持的服务
下表列出了符合“欧盟数据边界与访问理由”要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
沙特阿拉伯王国数据边界与访问理由
支持的服务
下表列出了符合沙特阿拉伯王国数据边界与访问理由要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
Sovereign Controls Advanced KSA CNTXT
支持的服务
下表列出了符合 Sovereign Controls Advanced KSA CNTXT 要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
Sovereign Controls Foundation KSA CNTXT
支持的服务
下表列出了符合 Sovereign Controls Foundation KSA CNTXT 要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
Indra/Minsait 主权控制
支持的服务
下表列出了符合 Indra / Minsait 的 Sovereign Controls 要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
PSN (TIM) 主权控制
支持的服务
下表列出了符合 Sovereign Controls by PSN (TIM) 要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
医疗保健和生命科学行业的美国数据边界
支持的服务
下表列出了符合美国医疗保健和生命科学行业数据边界要求的 Cloud DNS API 及其版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|
医疗保健和生命科学行业的美国数据边界与支持
支持的服务
下表列出了符合“美国医疗保健和生命科学行业的数据边界与支持”要求的 Cloud DNS API 和版本。
| 服务 |
版本 |
状态 |
| dns.googleapis.com |
v1 |
支持
|
| dns.googleapis.com |
v1alpha2 |
支持
|
| dns.googleapis.com |
v1beta2 |
支持
|
| dns.googleapis.com |
v2 |
支持
|
| dns.googleapis.com |
v2beta1 |
支持
|
不适用于敏感数据的字段
下表列出了不适合存储敏感信息的字段类别和特定字段。为确保合规,请避免在这些字段中放置受保护的数据。如需查看完整列表,请与您的 Google Cloud 代表联系。
| 类别 |
字段 |
| 身份验证和授权 |
|
| 客户端标识符 |
header.abuse.metadata.clientIp
header.abuse.metadata.deviceIdHash
header.abuse.metadata.networkId
header.abuse.metadata.source
header.abuse.metadata.userAgent
header.abuse.metadata.userKey.id
|
| DNS 记录集详情 |
rrset.name
rrset.routingPolicy.geo.failovers.rrdatas
rrset.routingPolicy.geo.items.rrdatas
rrset.routingPolicy.wrr.items.rrdatas
rrset.rrdatas
rrset.type
|
| GKE 集群信息 |
policy.gkeClusters.gkeClusterName
policy.gkeClusters.internalGkeClusterHash
policyResource.gkeClusters.gkeClusterName
policyResource.gkeClusters.internalGkeClusterHash
responsePolicy.gkeClusters.gkeClusterName
responsePolicy.gkeClusters.internalGkeClusterHash
|
| 托管式区域配置 |
managedZone
managedZone.description
managedZone.dnsName
managedZone.forwardingConfig.targetNameServers.ipv4Address
managedZone.forwardingConfig.targetNameServers.ipv6Address
managedZone.name
|
| 广告网络定位 |
managedZone.privateVisibilityConfig.networks.networkUrl
managedZoneResource.privateVisibilityConfig.networks.networkUrl
policy.networks.networkUrl
policyResource.networks.networkUrl
responsePolicy.networks.networkUrl
targetNetwork
|
| 策略配置 |
policy
policy.description
policy.fingerprint
policy.name
|
| 资源标识符 |
change.id
managedZoneResource.name
policyResource.name
project
responsePolicy.responsePolicyName
responsePolicyRule.dnsName
|
| 路由政策配置 |
responsePolicyRule.localData.localDatas.routingPolicy.geo.failovers.healthCheckedTargets.internalLoadBalancers.region
responsePolicyRule.localData.localDatas.routingPolicy.geo.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.geoPolicy.items.healthCheckedTargets.internalLoadBalancers.ipAddress
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.failovers.signatureRrdatas
responsePolicyRule.localData.localDatas.routingPolicy.primaryBackup.backupGeoTargets.items.healthCheckedTargets.internalLoadBalancers.port
responsePolicyRule.localData.localDatas.routingPolicy.wrrPolicy.items.rrdatas
|
| TSIG 密钥配置 |
tsigKey
tsigKey.fingerprint
tsigKey.key
tsigKey.name
tsigKeyResource.key
tsigKeyResource.name
|
|