"description":"Restricts findings to items that match. Supports info_type and likelihood.\n\nExamples:\n\n- info_type=EMAIL_ADDRESS\n- info_type=PHONE_NUMBER,EMAIL_ADDRESS\n- likelihood=VERY_LIKELY\n- likelihood=VERY_LIKELY,LIKELY\n- info_type=EMAIL_ADDRESS,likelihood=VERY_LIKELY,LIKELY",
"description":"Identifier of the results set returned as metadata of\nthe longrunning operation created by a call to InspectDataSource.\nShould be in the format of `inspect/results/{id}`.",
"description":"The value returned by the last `ListInspectFindingsResponse`; indicates\nthat this is a continuation of a prior `ListInspectFindings` call, and that\nthe system should return the next page of data.",
"description":"Cancels an operation. Use the `inspect.operations.get` to check whether the cancellation succeeded or the operation completed despite cancellation.",
"request":{
"$ref":"GoogleLongrunningCancelOperationRequest"
},
"response":{
"$ref":"GoogleProtobufEmpty"
},
"parameterOrder":[
"name"
],
"httpMethod":"POST",
"scopes":[
"https://www.googleapis.com/auth/cloud-platform"
],
"parameters":{
"name":{
"location":"path",
"description":"The name of the operation resource to be cancelled.",
"description":"Gets the latest state of a long-running operation. Clients can use this\nmethod to poll the operation result at intervals as recommended by the API\nservice.",
"description":"Optional language code for localized friendly category names.\nIf omitted or if localized strings are not available,\nen-US strings will be returned.",
"description":"Optional BCP-47 language code for localized info type friendly\nnames. If omitted, or if localized strings are not available,\nen-US strings will be returned.",
"description":"Cancels an operation. Use the `inspect.operations.get` to check whether the cancellation succeeded or the operation completed despite cancellation.",
"description":"Gets the latest state of a long-running operation. Clients can use this\nmethod to poll the operation result at intervals as recommended by the API\nservice.",
"description":"Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters.",
"type":"string"
},
"pp":{
"location":"query",
"description":"Pretty-print response.",
"type":"boolean",
"default":"true"
},
"oauth_token":{
"description":"OAuth 2.0 token for the current user.",
"type":"string",
"location":"query"
},
"bearer_token":{
"description":"OAuth bearer token.",
"type":"string",
"location":"query"
},
"upload_protocol":{
"description":"Upload protocol for media (e.g. \"raw\", \"multipart\").",
"type":"string",
"location":"query"
},
"prettyPrint":{
"location":"query",
"description":"Returns response with indentations and line breaks.",
"description":"API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token.",
"description":"The Google Data Loss Prevention API provides methods for detection of privacy-sensitive fragments in text, images, and Google Cloud Platform storage repositories.",
"description":"A generic empty message that you can re-use to avoid defining duplicated\nempty messages in your APIs. A typical example is to use it as the request\nor the response type of an API method. For instance:\n\n service Foo {\n rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty);\n }\n\nThe JSON representation for `Empty` is empty JSON object `{}`.",
"description":"Response to the ListInspectFindings request.",
"type":"object",
"properties":{
"result":{
"$ref":"GooglePrivacyDlpV2beta1InspectResult",
"description":"The results."
},
"nextPageToken":{
"description":"If not empty, indicates that there may be more results that match the\nrequest; this value should be passed in a new `ListInspectFindingsRequest`.",
"description":"The server-assigned name, which is only unique within the same service that\noriginally returns it. If you use the default HTTP mapping, the\n`name` should have the format of `inspect/results/{id}`.",
"description":"Index of the first character of the range (inclusive).",
"format":"int64",
"type":"string"
},
"end":{
"description":"Index of the last character of the range (exclusive).",
"format":"int64",
"type":"string"
}
},
"id":"GooglePrivacyDlpV2beta1Range"
},
"GoogleTypeTimeOfDay":{
"description":"Represents a time of day. The date and time zone are either not significant\nor are specified elsewhere. An API may choose to allow leap seconds. Related\ntypes are google.type.Date and `google.protobuf.Timestamp`.",
"type":"object",
"properties":{
"hours":{
"description":"Hours of day in 24 hour format. Should be from 0 to 23. An API may choose\nto allow the value \"24:00:00\" for scenarios like business closing time.",
"format":"int32",
"type":"integer"
},
"nanos":{
"description":"Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.",
"format":"int32",
"type":"integer"
},
"seconds":{
"description":"Seconds of minutes of the time. Must normally be from 0 to 59. An API may\nallow the value 60 if it allows leap-seconds.",
"format":"int32",
"type":"integer"
},
"minutes":{
"description":"Minutes of hour of day. Must be from 0 to 59.",
"format":"int32",
"type":"integer"
}
},
"id":"GoogleTypeTimeOfDay"
},
"GooglePrivacyDlpV2beta1DeidentifyConfig":{
"description":"The configuration that controls how the data will change.",
"description":"Treat the dataset as structured. Transformations can be applied to\nspecific locations within structured datasets, such as transforming\na column within a table."
"description":"Treat the dataset as free-form text and apply the same free text\ntransformation everywhere."
}
},
"id":"GooglePrivacyDlpV2beta1DeidentifyConfig"
},
"GooglePrivacyDlpV2beta1LDiversityConfig":{
"description":"l-diversity metric, used for analysis of reidentification risk.",
"type":"object",
"properties":{
"sensitiveAttribute":{
"$ref":"GooglePrivacyDlpV2beta1FieldId",
"description":"Sensitive field for computing the l-value."
},
"quasiIds":{
"description":"Set of quasi-identifiers indicating how equivalence classes are\ndefined for the l-diversity computation. When multiple fields are\nspecified, they are considered a single composite key.",
"description":"References to fields uniquely identifying rows within the table.\nNested fields in the format, like `person.birthdate.year`, are allowed.",
"type":"array",
"items":{
"$ref":"GooglePrivacyDlpV2beta1FieldId"
}
}
},
"id":"GooglePrivacyDlpV2beta1BigQueryOptions"
},
"GooglePrivacyDlpV2beta1OperationConfig":{
"description":"Additional configuration for inspect long running operations.",
"type":"object",
"properties":{
"maxItemFindings":{
"description":"Max number of findings per file, Datastore entity, or database row.",
"format":"int64",
"type":"string"
}
},
"id":"GooglePrivacyDlpV2beta1OperationConfig"
},
"GooglePrivacyDlpV2beta1PrivacyMetric":{
"description":"Privacy metric to compute for reidentification risk analysis.",
"description":"Type of information to replace. Only one ReplaceConfig per info_type\nshould be provided. If ReplaceConfig does not have an info_type, the DLP\nAPI matches it against all info_types that are found but not specified in\nanother ReplaceConfig.",
"$ref":"GooglePrivacyDlpV2beta1InfoType"
},
"replaceWith":{
"description":"Content replacing sensitive information of given type. Max 256 chars.",
"description":"Options defining a data set within Google Cloud Datastore.",
"type":"object",
"properties":{
"partitionId":{
"$ref":"GooglePrivacyDlpV2beta1PartitionId",
"description":"A partition ID identifies a grouping of entities. The grouping is always\nby project and namespace, however the namespace ID may be empty."
},
"kind":{
"$ref":"GooglePrivacyDlpV2beta1KindExpression",
"description":"The kind to process."
},
"projection":{
"description":"Properties to scan. If none are specified, all properties will be scanned\nby default.",
"type":"array",
"items":{
"$ref":"GooglePrivacyDlpV2beta1Projection"
}
}
},
"id":"GooglePrivacyDlpV2beta1DatastoreOptions"
},
"GooglePrivacyDlpV2beta1RecordTransformations":{
"description":"A type of transformation that is applied over structured data such as a\ntable.",
"type":"object",
"properties":{
"fieldTransformations":{
"description":"Transform the record by applying various field transformations.",
"description":"Configuration defining which records get suppressed entirely. Records that\nmatch any suppression rule are omitted from the output [optional].",
"description":"Configuration description of the scanning process.\nWhen used with redactContent only info_types and min_likelihood are currently\nused.",
"type":"object",
"properties":{
"infoTypeLimits":{
"description":"Configuration of findings limit given for specified info types.",
"type":"array",
"items":{
"$ref":"GooglePrivacyDlpV2beta1InfoTypeLimit"
}
},
"maxFindings":{
"description":"Limits the number of findings per content item or long running operation.",
"format":"int32",
"type":"integer"
},
"infoTypes":{
"description":"Restricts what info_types to look for. The values must correspond to\nInfoType values returned by ListInfoTypes or found in documentation.\nEmpty info_types runs all enabled detectors.",
"type":"array",
"items":{
"$ref":"GooglePrivacyDlpV2beta1InfoType"
}
},
"includeQuote":{
"description":"When true, a contextual quote from the data that triggered a finding is\nincluded in the response; see Finding.quote.",
"type":"boolean"
},
"excludeTypes":{
"description":"When true, excludes type information of the findings.",
"type":"boolean"
},
"minLikelihood":{
"enumDescriptions":[
"Default value; information with all likelihoods is included.",
"Few matching elements.",
"",
"Some matching elements.",
"",
"Many matching elements."
],
"enum":[
"LIKELIHOOD_UNSPECIFIED",
"VERY_UNLIKELY",
"UNLIKELY",
"POSSIBLE",
"LIKELY",
"VERY_LIKELY"
],
"description":"Only returns findings equal or above this threshold.",
"type":"string"
}
},
"id":"GooglePrivacyDlpV2beta1InspectConfig"
},
"GooglePrivacyDlpV2beta1Projection":{
"description":"A representation of a Datastore property in a projection.",
"description":"Redact a given value. For example, if used with an `InfoTypeTransformation`\ntransforming PHONE_NUMBER, and input 'My phone number is 206-555-0123', the\noutput would be 'My phone number is '.",
"type":"object",
"properties":{},
"id":"GooglePrivacyDlpV2beta1RedactConfig"
},
"GooglePrivacyDlpV2beta1Key":{
"description":"A unique identifier for a Datastore entity.\nIf a key's partition ID or any of its path kinds or names are\nreserved/read-only, the key is reserved/read-only.\nA reserved/read-only key is forbidden in certain documented contexts.",
"type":"object",
"properties":{
"path":{
"description":"The entity path.\nAn entity path consists of one or more elements composed of a kind and a\nstring or numerical identifier, which identify entities. The first\nelement identifies a _root entity_, the second element identifies\na _child_ of the root entity, the third element identifies a child of the\nsecond entity, and so forth. The entities identified by all prefixes of\nthe path are called the element's _ancestors_.\n\nA path can never be empty, and a path can have at most 100 elements.",
"type":"array",
"items":{
"$ref":"GooglePrivacyDlpV2beta1PathElement"
}
},
"partitionId":{
"description":"Entities are partitioned into subsets, currently identified by a project\nID and namespace ID.\nQueries are scoped to a single partition.",
"$ref":"GooglePrivacyDlpV2beta1PartitionId"
}
},
"id":"GooglePrivacyDlpV2beta1Key"
},
"GooglePrivacyDlpV2beta1CryptoHashConfig":{
"description":"Pseudonymization method that generates surrogates via cryptographic hashing.\nUses SHA-256.\nOutputs a 32 byte digest as an uppercase hex string\n(for example, 41D1567F7F99F1DC2A5FAB886DEE5BEE).\nCurrently, only string and integer values can be hashed.",
"type":"object",
"properties":{
"cryptoKey":{
"description":"The key used by the hash function.",
"$ref":"GooglePrivacyDlpV2beta1CryptoKey"
}
},
"id":"GooglePrivacyDlpV2beta1CryptoHashConfig"
},
"GooglePrivacyDlpV2beta1InspectContentRequest":{
"description":"Request to search for potentially sensitive info in a list of items.",
"type":"object",
"properties":{
"items":{
"description":"The list of items to inspect. Items in a single request are\nconsidered \"related\" unless inspect_config.independent_inputs is true.\nUp to 100 are allowed per request.",
"description":"Represents a whole calendar date, e.g. date of birth. The time of day and\ntime zone are either specified elsewhere or are not significant. The date\nis relative to the Proleptic Gregorian Calendar. The day may be 0 to\nrepresent a year and month where the day is not significant, e.g. credit card\nexpiration date. The year may be 0 to represent a month and day independent\nof year, e.g. anniversary date. Related types are google.type.TimeOfDay\nand `google.protobuf.Timestamp`.",
"type":"object",
"properties":{
"year":{
"description":"Year of date. Must be from 1 to 9999, or 0 if specifying a date without\na year.",
"format":"int32",
"type":"integer"
},
"day":{
"description":"Day of month. Must be from 1 to 31 and valid for the year and month, or 0\nif specifying a year/month where the day is not significant.",
"format":"int32",
"type":"integer"
},
"month":{
"description":"Month of year. Must be from 1 to 12.",
"format":"int32",
"type":"integer"
}
},
"id":"GoogleTypeDate"
},
"GooglePrivacyDlpV2beta1ImageRedactionConfig":{
"description":"Configuration for determing how redaction of images should occur.",
"type":"object",
"properties":{
"redactionColor":{
"$ref":"GooglePrivacyDlpV2beta1Color",
"description":"The color to use when redacting content from an image. If not specified,\nthe default is black."
},
"redactAllText":{
"description":"If true, all text found in the image, regardless whether it matches an\ninfo_type, is redacted.",
"type":"boolean"
},
"infoType":{
"description":"Only one per info_type should be provided per request. If not\nspecified, and redact_all_text is false, the DLP API will redact all\ntext that it matches against all info_types that are found, but not\nspecified in another ImageRedactionConfig.",
"description":"Specifies the location of a finding within its source item.",
"type":"object",
"properties":{
"recordKey":{
"description":"Key of the finding.",
"$ref":"GooglePrivacyDlpV2beta1RecordKey"
},
"tableLocation":{
"description":"Location within a `ContentItem.Table`.",
"$ref":"GooglePrivacyDlpV2beta1TableLocation"
},
"codepointRange":{
"description":"Character offsets within a content item, included when content type\nis a text. Default charset assumed to be UTF-8.",
"$ref":"GooglePrivacyDlpV2beta1Range"
},
"fieldId":{
"description":"Field id of the field containing the finding.",
"$ref":"GooglePrivacyDlpV2beta1FieldId"
},
"imageBoxes":{
"description":"Location within an image's pixels.",
"type":"array",
"items":{
"$ref":"GooglePrivacyDlpV2beta1ImageLocation"
}
},
"byteRange":{
"$ref":"GooglePrivacyDlpV2beta1Range",
"description":"Zero-based byte offsets within a content item."
}
},
"id":"GooglePrivacyDlpV2beta1Location"
},
"GooglePrivacyDlpV2beta1RecordSuppression":{
"description":"Configuration to suppress records whose suppression conditions evaluate to\ntrue.",
"type":"object",
"properties":{
"condition":{
"$ref":"GooglePrivacyDlpV2beta1RecordCondition"
}
},
"id":"GooglePrivacyDlpV2beta1RecordSuppression"
},
"GooglePrivacyDlpV2beta1UnwrappedCryptoKey":{
"description":"Using raw keys is prone to security risks due to accidentally\nleaking the key. Choose another type of key if possible.",
"type":"object",
"properties":{
"key":{
"description":"The AES 128/192/256 bit key. [required]",
"format":"byte",
"type":"string"
}
},
"id":"GooglePrivacyDlpV2beta1UnwrappedCryptoKey"
},
"GooglePrivacyDlpV2beta1EntityId":{
"description":"An entity in a dataset is a field or set of fields that correspond to a\nsingle person. For example, in medical records the `EntityId` might be\na patient identifier, or for financial records it might be an account\nidentifier. This message is used when generalizations or analysis must be\nconsistent across multiple rows pertaining to the same entity.",
"type":"object",
"properties":{
"field":{
"description":"Composite key indicating which field contains the entity identifier.",
"$ref":"GooglePrivacyDlpV2beta1FieldId"
}
},
"id":"GooglePrivacyDlpV2beta1EntityId"
},
"GooglePrivacyDlpV2beta1InfoTypeDescription":{
"description":"Description of the information type (infoType).",
"type":"object",
"properties":{
"displayName":{
"description":"Human readable form of the infoType name.",
"type":"string"
},
"categories":{
"description":"List of categories this infoType belongs to.",
"description":"The `Status` type defines a logical error model that is suitable for different\nprogramming environments, including REST APIs and RPC APIs. It is used by\n[gRPC](https://github.com/grpc). The error model is designed to be:\n\n- Simple to use and understand for most users\n- Flexible enough to meet unexpected needs\n\n# Overview\n\nThe `Status` message contains three pieces of data: error code, error message,\nand error details. The error code should be an enum value of\ngoogle.rpc.Code, but it may accept additional error codes if needed. The\nerror message should be a developer-facing English message that helps\ndevelopers *understand* and *resolve* the error. If a localized user-facing\nerror message is needed, put the localized message in the error details or\nlocalize it in the client. The optional error details may contain arbitrary\ninformation about the error. There is a predefined set of error detail types\nin the package `google.rpc` that can be used for common error conditions.\n\n# Language mapping\n\nThe `Status` message is the logical representation of the error model, but it\nis not necessarily the actual wire format. When the `Status` message is\nexposed in different client libraries and different wire protocols, it can be\nmapped differently. For example, it will likely be mapped to some exceptions\nin Java, but more likely mapped to some error codes in C.\n\n# Other uses\n\nThe error model and the `Status` message can be used in a variety of\nenvironments, either with or without APIs, to provide a\nconsistent developer experience across different environments.\n\nExample uses of this error model include:\n\n- Partial errors. If a service needs to return partial errors to the client,\n it may embed the `Status` in the normal response to indicate the partial\n errors.\n\n- Workflow errors. A typical workflow has multiple steps. Each step may\n have a `Status` message for error reporting.\n\n- Batch operations. If a client uses batch request and batch response, the\n `Status` message should be used directly inside batch response, one for\n each error sub-response.\n\n- Asynchronous operations. If an API call embeds asynchronous operation\n results in its response, the status of those operations should be\n represented directly using the `Status` message.\n\n- Logging. If some API errors are stored in logs, the message `Status` could\n be used directly after any stripping needed for security/privacy reasons.",
"type":"object",
"properties":{
"details":{
"description":"A list of messages that carry the error details. There is a common set of\nmessage types for APIs to use.",
"type":"array",
"items":{
"additionalProperties":{
"description":"Properties of the object. Contains field @type with type URL.",
"type":"any"
},
"type":"object"
}
},
"code":{
"description":"The status code, which should be an enum value of google.rpc.Code.",
"format":"int32",
"type":"integer"
},
"message":{
"description":"A developer-facing error message, which should be in English. Any\nuser-facing error message should be localized and sent in the\ngoogle.rpc.Status.details field, or localized by the client.",
"type":"string"
}
},
"id":"GoogleRpcStatus"
},
"GooglePrivacyDlpV2beta1PathElement":{
"description":"A (kind, ID/name) pair used to construct a key path.\n\nIf either name or ID is set, the element is complete.\nIf neither is set, the element is incomplete.",
"type":"object",
"properties":{
"kind":{
"description":"The kind of the entity.\nA kind matching regex `__.*__` is reserved/read-only.\nA kind must not contain more than 1500 bytes when UTF-8 encoded.\nCannot be `\"\"`.",
"type":"string"
},
"id":{
"description":"The auto-allocated ID of the entity.\nNever equal to zero. Values less than zero are discouraged and may not\nbe supported in the future.",
"format":"int64",
"type":"string"
},
"name":{
"description":"The name of the entity.\nA name matching regex `__.*__` is reserved/read-only.\nA name must not be more than 1500 bytes when UTF-8 encoded.\nCannot be `\"\"`.",
"type":"string"
}
},
"id":"GooglePrivacyDlpV2beta1PathElement"
},
"GooglePrivacyDlpV2beta1BigQueryTable":{
"description":"Message defining the location of a BigQuery table. A table is uniquely\nidentified by its project_id, dataset_id, and table_name. Within a query\na table is often referenced with a string in the format of:\n`\u003cproject_id\u003e:\u003cdataset_id\u003e.\u003ctable_id\u003e` or\n`\u003cproject_id\u003e.\u003cdataset_id\u003e.\u003ctable_id\u003e`.",
"type":"object",
"properties":{
"tableId":{
"description":"Name of the table.",
"type":"string"
},
"projectId":{
"description":"The Google Cloud Platform project ID of the project containing the table.\nIf omitted, project ID is inferred from the API call.",
"type":"string"
},
"datasetId":{
"description":"Dataset ID of the table.",
"type":"string"
}
},
"id":"GooglePrivacyDlpV2beta1BigQueryTable"
},
"GooglePrivacyDlpV2beta1SummaryResult":{
"description":"A collection that informs the user the number of times a particular\n`TransformationResultCode` and error details occurred.",
"type":"object",
"properties":{
"details":{
"description":"A place for warnings or errors to show up if a transformation didn't\nwork as expected.",
"description":"A type of transformation that will scan unstructured text and\napply various `PrimitiveTransformation`s to each finding, where the\ntransformation is applied to only values that were identified as a specific\ninfo_type.",
"type":"object",
"properties":{
"transformations":{
"description":"Transformation for each info type. Cannot specify more than one\nfor a given info type. [required]",
"description":"The zero-based index of the row where the finding is located.",
"format":"int64",
"type":"string"
}
},
"id":"GooglePrivacyDlpV2beta1TableLocation"
},
"GooglePrivacyDlpV2beta1DatastoreKey":{
"description":"Record key for a finding in Cloud Datastore.",
"type":"object",
"properties":{
"entityKey":{
"description":"Datastore entity key.",
"$ref":"GooglePrivacyDlpV2beta1Key"
}
},
"id":"GooglePrivacyDlpV2beta1DatastoreKey"
},
"GooglePrivacyDlpV2beta1KAnonymityConfig":{
"description":"k-anonymity metric, used for analysis of reidentification risk.",
"type":"object",
"properties":{
"entityId":{
"$ref":"GooglePrivacyDlpV2beta1EntityId",
"description":"Optional message indicating that each distinct `EntityId` should not\ncontribute to the k-anonymity count more than once per equivalence class."
"description":"Set of fields to compute k-anonymity over. When multiple fields are\nspecified, they are considered a single composite key. Structs and\nrepeated data types are not supported; however, nested fields are\nsupported so long as they are not structs themselves or nested within\na repeated field.",
"type":"array",
"items":{
"$ref":"GooglePrivacyDlpV2beta1FieldId"
}
}
},
"id":"GooglePrivacyDlpV2beta1KAnonymityConfig"
},
"GooglePrivacyDlpV2beta1RecordKey":{
"description":"Message for a unique key indicating a record that contains a finding.",
"description":"If true, then this item might have more findings than were returned,\nand the findings returned are an arbitrary subset of all findings.\nThe findings list might be truncated because the input items were too\nlarge, or because the server reached the maximum amount of resources\nallowed for a single API call. For best results, divide the input into\nsmaller batches.",
"description":"Type of the content, as defined in Content-Type HTTP header.\nSupported types are: all \"text\" types, octet streams, PNG images,\nJPEG images.",
"type":"string"
},
"value":{
"description":"String data to inspect or redact.",
"description":"Replaces an identifier with an surrogate using FPE with the FFX\nmode of operation.\nThe identifier must be encoded as ASCII.\nFor a given crypto key and context, the same identifier will be\nreplaced with the same surrogate.\nNote that a given identifier must be either the empty string or be at\nleast two characters long.",
"description":"A context may be used for higher security since the same\nidentifier in two different contexts likely will be given a distinct\nsurrogate. The principle is that the likeliness is inversely related\nto the ratio of the number of distinct identifiers per context over the\nnumber of possible surrogates: As long as this ratio is small, the\nlikehood is large.\n\nIf the context is not set, a default tweak will be used.\nIf the context is set but:\n\n1. there is no record present when transforming a given value or\n1. the field is not present when transforming a given value,\n\na default tweak will be used.\n\nNote that case (1) is expected when an `InfoTypeTransformation` is\napplied to both structured and non-structured `ContentItem`s.\nCurrently, the referenced field may be of value type integer or string.\n\nThe tweak is constructed as a sequence of bytes in big endian byte order\nsuch that:\n\n- a 64 bit integer is encoded followed by a single byte of value 1\n- a string is encoded in UTF-8 format followed by a single byte of value 2\n\nThis is also known as the 'tweak', as in tweakable encryption.",
"$ref":"GooglePrivacyDlpV2beta1FieldId"
},
"customAlphabet":{
"description":"This is supported by mapping these to the alphanumeric characters\nthat the FFX mode natively supports. This happens before/after\nencryption/decryption.\nEach character listed must appear only once.\nNumber of characters must be in the range [2, 62].\nThis must be encoded as ASCII.\nThe order of characters does not matter.",
"description":"This is a data encryption key (DEK) (as opposed to\na key encryption key (KEK) stored by KMS).\nWhen using KMS to wrap/unwrap DEKs, be sure to set an appropriate\nIAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot\nunwrap the data crypto key.",
"description":"Type of information the findings limit applies to. Only one limit per\ninfo_type should be provided. If InfoTypeLimit does not have an\ninfo_type, the DLP API applies the limit against all info_types that are\nfound but not specified in another InfoTypeLimit."
"description":"The field type of `value` and `field` do not need to match to be\nconsidered equal, but not all comparisons are possible.\n\nA `value` of type:\n\n- `string` can be compared against all other types\n- `boolean` can only be compared against other booleans\n- `integer` can be compared against doubles or a string if the string value\ncan be parsed as an integer.\n- `double` can be compared against integers or a string if the string can\nbe parsed as a double.\n- `Timestamp` can be compared against strings in RFC 3339 date string\nformat.\n- `TimeOfDay` can be compared against timestamps and strings in the format\nof 'HH:mm:ss'.\n\nIf we fail to compare do to type mismatch, a warning will be given and\nthe condition will evaluate to false.",
"description":"Datastore partition ID.\nA partition ID identifies a grouping of entities. The grouping is always\nby project and namespace, however the namespace ID may be empty.\n\nA partition ID contains several dimensions:\nproject ID and namespace ID.",
"type":"object",
"properties":{
"namespaceId":{
"description":"If not empty, the ID of the namespace to which the entities belong.",
"type":"string"
},
"projectId":{
"description":"The ID of the project to which the entities belong.",
"type":"string"
}
},
"id":"GooglePrivacyDlpV2beta1PartitionId"
},
"GooglePrivacyDlpV2beta1InspectContentResponse":{
"description":"Results of inspecting a list of items.",
"type":"object",
"properties":{
"results":{
"description":"Each content_item from the request has a result in this list, in the\nsame order as the request.",
"description":"The strings to replace findings text findings with. Must specify at least\none of these or one ImageRedactionConfig if redacting images.",
"type":"array",
"items":{
"$ref":"GooglePrivacyDlpV2beta1ReplaceConfig"
}
},
"imageRedactionConfigs":{
"description":"The configuration for specifying what content to redact from images.",
"description":"Partially mask a string by replacing a given number of characters with a\nfixed character. Masking can start from the beginning or end of the string.\nThis can be used on data of any type (numbers, longs, and so on) and when\nde-identifying structured data we'll attempt to preserve the original data's\ntype. (This allows you to take a long like 123 and modify it to a string like\n**3.",
"description":"Character to mask the sensitive values—for example, \"*\" for an\nalphabetic string such as name, or \"0\" for a numeric string such as ZIP\ncode or credit card number. String must have length 1. If not supplied, we\nwill default to \"*\" for strings, 0 for digits.",
"description":"Mask characters in reverse order. For example, if `masking_character` is\n'0', number_to_mask is 14, and `reverse_order` is false, then\n1234-5678-9012-3456 -\u003e 00000000000000-3456\nIf `masking_character` is '*', `number_to_mask` is 3, and `reverse_order`\nis true, then 12345 -\u003e 12***",
"description":"When masking a string, items in this list will be skipped when replacing.\nFor example, if your string is 555-555-5555 and you ask us to skip `-` and\nmask 5 chars with * we would produce ***-*55-5555.",
"description":"Name of the key. [required]\nThis is an arbitrary string used to differentiate different keys.\nA unique key is generated per name: two separate `TransientCryptoKey`\nprotos share the same generated key if their names are the same.\nWhen the data crypto key is generated, this name is not used in any way\n(repeating the api call will result in a different key being generated).",
"description":"Optional location to store findings. The bucket must already exist and\nthe Google APIs service account for DLP must have write permission to\nwrite to the given bucket.\nResults are split over multiple csv files with each file name matching\nthe pattern \"[operation_id]_[count].csv\", for example\n`3094877188788974909_1.csv`. The `operation_id` matches the\nidentifier for the Operation, and the `count` is a counter used for\ntracking the number of files written.\n\nThe CSV file(s) contain the following columns regardless of storage type\nscanned:\n- id\n- info_type\n- likelihood\n- byte size of finding\n- quote\n- timestamp\n\nFor Cloud Storage the next columns are:\n\n- file_path\n- start_offset\n\nFor Cloud Datastore the next columns are:\n\n- project_id\n- namespace_id\n- path\n- column_name\n- offset\n\nFor BigQuery the next columns are:\n\n- row_number\n- project_id\n- dataset_id\n- table_id",
"description":"Store findings in a new table in the dataset.",
"$ref":"GooglePrivacyDlpV2beta1BigQueryTable"
}
},
"id":"GooglePrivacyDlpV2beta1OutputStorageConfig"
},
"GooglePrivacyDlpV2beta1FieldTransformation":{
"description":"The transformation to apply to the field.",
"type":"object",
"properties":{
"condition":{
"description":"Only apply the transformation if the condition evaluates to true for the\ngiven `RecordCondition`. The conditions are allowed to reference fields\nthat are not used in the actual transformation. [optional]\n\nExample Use Cases:\n\n- Apply a different bucket transformation to an age column if the zip code\ncolumn for the same record is within a specific range.\n- Redact a field if the date of birth field is greater than 85.",
"description":"Generalization function that buckets values based on ranges. The ranges and\nreplacement values are dynamically provided by the user for custom behavior,\nsuch as 1-30 -\u003e LOW 31-65 -\u003e MEDIUM 66-100 -\u003e HIGH\nThis can be used on\ndata of type: number, long, string, timestamp.\nIf the bound `Value` type differs from the type of data being transformed, we\nwill first attempt converting the type of the data to be transformed to match\nthe type of the bound before comparing.",
"description":"Set of values defining the equivalence class. One value per\nquasi-identifier column in the original KAnonymity metric message.\nThe order is always the same as the original request.",
"description":"This field will contain an InspectOperationMetadata object for `inspect.operations.create` or a RiskAnalysisOperationMetadata object for `dataSource.analyze`. This will always be returned with the Operation.",
"description":"If the value is `false`, it means the operation is still in progress.\nIf `true`, the operation is completed, and either `error` or `response` is\navailable.",
"description":"This field will contain an InspectOperationResult object for `inspect.operations.create` or a RiskAnalysisOperationResult object for `dataSource.analyze`.",
"type":"object",
"additionalProperties":{
"description":"Properties of the object. Contains field @type with type URL.",
"type":"any"
}
},
"name":{
"description":"The server-assigned name. The `name` should have the format of `inspect/operations/\u003cidentifier\u003e`.",
"description":"Include to use an existing data crypto key wrapped by KMS.\nAuthorization requires the following IAM permissions when sending a request\nto perform a crypto transformation using a kms-wrapped crypto key:\ndlp.kms.encrypt",
"type":"object",
"properties":{
"wrappedKey":{
"description":"The wrapped data crypto key. [required]",
"format":"byte",
"type":"string"
},
"cryptoKeyName":{
"description":"The resource name of the KMS CryptoKey to use for unwrapping. [required]",
"description":"Buckets values based on fixed size ranges. The\nBucketing transformation can provide all of this functionality,\nbut requires more configuration. This message is provided as a convenience to\nthe user for simple bucketing strategies.\nThe resulting value will be a hyphenated string of\nlower_bound-upper_bound.\nThis can be used on data of type: double, long.\nIf the bound Value type differs from the type of data\nbeing transformed, we will first attempt converting the type of the data to\nbe transformed to match the type of the bound before comparing.",
"description":"Upper bound value of buckets. All values greater than upper_bound are\ngrouped together into a single bucket; for example if `upper_bound` = 89,\nthen all values greater than 89 are replaced with the value “89+”.\n[Required].",
"description":"Lower bound value of buckets. All values less than `lower_bound` are\ngrouped together into a single bucket; for example if `lower_bound` = 10,\nthen all values less than 10 are replaced with the value “-10”. [Required].",
"description":"Size of each bucket (except for minimum and maximum buckets). So if\n`lower_bound` = 10, `upper_bound` = 89, and `bucket_size` = 10, then the\nfollowing buckets would be used: -10, 10-20, 20-30, 30-40, 40-50, 50-60,\n60-70, 70-80, 80-89, 89+. Precision up to 2 decimals works. [Required].",
"description":"Field to compute categorical stats on. All column types are\nsupported except for arrays and structs. However, it may be more\ninformative to use NumericalStats when the field type is supported,\ndepending on the data.",
"description":"Metadata returned within the\n[`riskAnalysis.operations.get`](/dlp/docs/reference/rest/v2beta1/riskAnalysis.operations/get)\nfor risk analysis.",
