The following table lists the Sensitive Data Protection APIs and versions that meet the requirements of Data Boundary for ITAR.
Sensitive Data Protection is available for Data Boundary for ITAR in the following Google Cloud regions:
Resource: No resource
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
Resource: dlp.googleapis.com/ColumnDataProfile
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
| API Method |
Protected fields |
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=organizations/*/locations/*}/columnDataProfiles
RPC methods:
google.privacy.dlp.v2.DlpService.ListColumnDataProfiles
|
|
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=projects/*/locations/*}/columnDataProfiles
RPC methods:
google.privacy.dlp.v2.DlpService.ListColumnDataProfiles
|
|
Resource: dlp.googleapis.com/Connection
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
| API Method |
Protected fields |
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=organizations/*/locations/*}/connections
RPC methods:
google.privacy.dlp.v2.DlpService.ListConnections
|
|
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=organizations/*/locations/*}/connections:search
RPC methods:
google.privacy.dlp.v2.DlpService.SearchConnections
|
|
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=projects/*/locations/*}/connections
RPC methods:
google.privacy.dlp.v2.DlpService.ListConnections
|
|
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=projects/*/locations/*}/connections:search
RPC methods:
google.privacy.dlp.v2.DlpService.SearchConnections
|
|
Resource: dlp.googleapis.com/ContentPolicy
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
Resource: dlp.googleapis.com/DeidentifyTemplate
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
Resource: dlp.googleapis.com/DiscoveryConfig
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
Resource: dlp.googleapis.com/DlpJob
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
Resource: dlp.googleapis.com/Estimate
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
| API Method |
Protected fields |
|
Service: dlp.googleapis.com
REST API: POST /v2/{parent=organizations/*/locations/*}/estimates
RPC methods:
google.privacy.dlp.v2.DlpService.CreateEstimate
|
dataProfileConfig.schedules.cloudStorageTarget.filter.collection.includeTags.tagFilters.namespacedTagKeydataProfileConfig.schedules.cloudStorageTarget.filter.collection.includeTags.tagFilters.namespacedTagValuedataProfileConfig.targets.cloudStorageTarget.filter.collection.includeTags.tagFilters.namespacedTagKeydataProfileConfig.targets.cloudStorageTarget.filter.collection.includeTags.tagFilters.namespacedTagValue
|
|
Service: dlp.googleapis.com
REST API: POST /v2/{parent=projects/*/locations/*}/estimates
RPC methods:
google.privacy.dlp.v2.DlpService.CreateEstimate
|
dataProfileConfig.schedules.cloudStorageTarget.filter.collection.includeTags.tagFilters.namespacedTagKeydataProfileConfig.schedules.cloudStorageTarget.filter.collection.includeTags.tagFilters.namespacedTagValuedataProfileConfig.targets.cloudStorageTarget.filter.collection.includeTags.tagFilters.namespacedTagKeydataProfileConfig.targets.cloudStorageTarget.filter.collection.includeTags.tagFilters.namespacedTagValue
|
Resource: dlp.googleapis.com/FileStoreDataProfile
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
| API Method |
Protected fields |
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=organizations/*/locations/*}/fileStoreDataProfiles
RPC methods:
google.privacy.dlp.v2.DlpService.ListFileStoreDataProfiles
|
|
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=projects/*/locations/*}/fileStoreDataProfiles
RPC methods:
google.privacy.dlp.v2.DlpService.ListFileStoreDataProfiles
|
|
|
Service: dlp.googleapis.com
REST API: POST /v2/{parent=organizations/*/locations/*}/fileStoreDataProfiles:startHybridDataProfile
RPC methods:
google.privacy.dlp.v2.DlpService.StartFileStoreHybridDataProfile
|
profileIdtags.keytags.namespacedTagValuetags.value
|
|
Service: dlp.googleapis.com
REST API: POST /v2/{parent=projects/*/locations/*}/fileStoreDataProfiles:startHybridDataProfile
RPC methods:
google.privacy.dlp.v2.DlpService.StartFileStoreHybridDataProfile
|
profileIdtags.keytags.namespacedTagValuetags.value
|
Resource: dlp.googleapis.com/Finding
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
| API Method |
Protected fields |
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=projects/*/locations/*}/findings
RPC methods:
google.privacy.dlp.v2.DlpService.ListFindings
|
|
Resource: dlp.googleapis.com/InspectTemplate
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
Resource: dlp.googleapis.com/JobTrigger
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
Resource: dlp.googleapis.com/ProjectDataProfile
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
| API Method |
Protected fields |
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=organizations/*/locations/*}/projectDataProfiles
RPC methods:
google.privacy.dlp.v2.DlpService.ListProjectDataProfiles
|
|
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=projects/*/locations/*}/projectDataProfiles
RPC methods:
google.privacy.dlp.v2.DlpService.ListProjectDataProfiles
|
|
Resource: dlp.googleapis.com/StoredInfoType
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
| API Method |
Protected fields |
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=organizations/*/locations/*}/storedInfoTypes
RPC methods:
google.privacy.dlp.v2.DlpService.ListStoredInfoTypes
|
|
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=organizations/*}/storedInfoTypes
RPC methods:
google.privacy.dlp.v2.DlpService.ListStoredInfoTypes
|
|
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=projects/*/locations/*}/storedInfoTypes
RPC methods:
google.privacy.dlp.v2.DlpService.ListStoredInfoTypes
|
|
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=projects/*}/storedInfoTypes
RPC methods:
google.privacy.dlp.v2.DlpService.ListStoredInfoTypes
|
|
|
Service: dlp.googleapis.com
REST API: PATCH /v2/{name=organizations/*/locations/*/storedInfoTypes/*}
RPC methods:
google.privacy.dlp.v2.DlpService.UpdateStoredInfoType
|
config.dictionary.bigQueryColumn.field.nameconfig.dictionary.cloudStoragePath.pathconfig.largeCustomDictionary.bigQueryField.field.nameconfig.largeCustomDictionary.cloudStorageFileSet.urlconfig.largeCustomDictionary.outputPath.path
|
|
Service: dlp.googleapis.com
REST API: PATCH /v2/{name=organizations/*/storedInfoTypes/*}
RPC methods:
google.privacy.dlp.v2.DlpService.UpdateStoredInfoType
|
config.dictionary.bigQueryColumn.field.nameconfig.dictionary.cloudStoragePath.pathconfig.largeCustomDictionary.bigQueryField.field.nameconfig.largeCustomDictionary.cloudStorageFileSet.urlconfig.largeCustomDictionary.outputPath.path
|
|
Service: dlp.googleapis.com
REST API: PATCH /v2/{name=projects/*/locations/*/storedInfoTypes/*}
RPC methods:
google.privacy.dlp.v2.DlpService.UpdateStoredInfoType
|
config.dictionary.bigQueryColumn.field.nameconfig.dictionary.cloudStoragePath.pathconfig.largeCustomDictionary.bigQueryField.field.nameconfig.largeCustomDictionary.cloudStorageFileSet.urlconfig.largeCustomDictionary.outputPath.path
|
|
Service: dlp.googleapis.com
REST API: PATCH /v2/{name=projects/*/storedInfoTypes/*}
RPC methods:
google.privacy.dlp.v2.DlpService.UpdateStoredInfoType
|
config.dictionary.bigQueryColumn.field.nameconfig.dictionary.cloudStoragePath.pathconfig.largeCustomDictionary.bigQueryField.field.nameconfig.largeCustomDictionary.cloudStorageFileSet.urlconfig.largeCustomDictionary.outputPath.path
|
|
Service: dlp.googleapis.com
REST API: POST /v2/{parent=organizations/*/locations/*}/storedInfoTypes
RPC methods:
google.privacy.dlp.v2.DlpService.CreateStoredInfoType
|
config.dictionary.bigQueryColumn.field.nameconfig.dictionary.cloudStoragePath.pathconfig.largeCustomDictionary.bigQueryField.field.nameconfig.largeCustomDictionary.cloudStorageFileSet.urlconfig.largeCustomDictionary.outputPath.pathstoredInfoTypeId
|
|
Service: dlp.googleapis.com
REST API: POST /v2/{parent=organizations/*}/storedInfoTypes
RPC methods:
google.privacy.dlp.v2.DlpService.CreateStoredInfoType
|
config.dictionary.bigQueryColumn.field.nameconfig.dictionary.cloudStoragePath.pathconfig.largeCustomDictionary.bigQueryField.field.nameconfig.largeCustomDictionary.cloudStorageFileSet.urlconfig.largeCustomDictionary.outputPath.pathstoredInfoTypeId
|
|
Service: dlp.googleapis.com
REST API: POST /v2/{parent=projects/*/locations/*}/storedInfoTypes
RPC methods:
google.privacy.dlp.v2.DlpService.CreateStoredInfoType
|
config.dictionary.bigQueryColumn.field.nameconfig.dictionary.cloudStoragePath.pathconfig.largeCustomDictionary.bigQueryField.field.nameconfig.largeCustomDictionary.cloudStorageFileSet.urlconfig.largeCustomDictionary.outputPath.pathstoredInfoTypeId
|
|
Service: dlp.googleapis.com
REST API: POST /v2/{parent=projects/*}/storedInfoTypes
RPC methods:
google.privacy.dlp.v2.DlpService.CreateStoredInfoType
|
config.dictionary.bigQueryColumn.field.nameconfig.dictionary.cloudStoragePath.pathconfig.largeCustomDictionary.bigQueryField.field.nameconfig.largeCustomDictionary.cloudStorageFileSet.urlconfig.largeCustomDictionary.outputPath.pathstoredInfoTypeId
|
Resource: dlp.googleapis.com/TableDataProfile
The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.
| API Method |
Protected fields |
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=organizations/*/locations/*}/tableDataProfiles
RPC methods:
google.privacy.dlp.v2.DlpService.ListTableDataProfiles
|
|
|
Service: dlp.googleapis.com
REST API: GET /v2/{parent=projects/*/locations/*}/tableDataProfiles
RPC methods:
google.privacy.dlp.v2.DlpService.ListTableDataProfiles
|
|
The following table provides an illustrative list of field categories and specific fields that aren't suitable for sensitive information. To maintain compliance, avoid placing protected data in these fields. For a complete list, contact your Google Cloud representative.
