DLPDeidentifyTemplate


Property Value
Google Cloud Service Name Cloud DLP
Google Cloud Service Documentation /dlp/docs/
Google Cloud REST Resource Name projects.deidentifyTemplates
Google Cloud REST Resource Documentation /dlp/docs/reference/rest/v2/projects.deidentifyTemplates
Config Connector Resource Short Names gcpdlpdeidentifytemplate
gcpdlpdeidentifytemplates
dlpdeidentifytemplate
Config Connector Service Name dlp.googleapis.com
Config Connector Resource Fully Qualified Name dlpdeidentifytemplates.dlp.cnrm.cloud.google.com
Can Be Referenced by IAMPolicy/IAMPolicyMember No
Config Connector Default Average Reconcile Interval In Seconds 600

Custom Resource Definition Properties

Spec

Schema

deidentifyConfig:
  infoTypeTransformations:
    transformations:
    - infoTypes:
      - name: string
      primitiveTransformation:
        bucketingConfig:
          buckets:
          - max:
              booleanValue: boolean
              dateValue:
                day: integer
                month: integer
                year: integer
              dayOfWeekValue: string
              floatValue: float
              integerValue: integer
              stringValue: string
              timeValue:
                hours: integer
                minutes: integer
                nanos: integer
                seconds: integer
              timestampValue: string
            min:
              booleanValue: boolean
              dateValue:
                day: integer
                month: integer
                year: integer
              dayOfWeekValue: string
              floatValue: float
              integerValue: integer
              stringValue: string
              timeValue:
                hours: integer
                minutes: integer
                nanos: integer
                seconds: integer
              timestampValue: string
            replacementValue:
              booleanValue: boolean
              dateValue:
                day: integer
                month: integer
                year: integer
              dayOfWeekValue: string
              floatValue: float
              integerValue: integer
              stringValue: string
              timeValue:
                hours: integer
                minutes: integer
                nanos: integer
                seconds: integer
              timestampValue: string
        characterMaskConfig:
          charactersToIgnore:
          - charactersToSkip: string
            commonCharactersToIgnore: string
          maskingCharacter: string
          numberToMask: integer
          reverseOrder: boolean
        cryptoDeterministicConfig:
          context:
            name: string
          cryptoKey:
            kmsWrapped:
              cryptoKeyRef:
                external: string
                name: string
                namespace: string
              wrappedKey: string
            transient:
              name: string
            unwrapped:
              key: string
          surrogateInfoType:
            name: string
        cryptoHashConfig:
          cryptoKey:
            kmsWrapped:
              cryptoKeyRef:
                external: string
                name: string
                namespace: string
              wrappedKey: string
            transient:
              name: string
            unwrapped:
              key: string
        cryptoReplaceFfxFpeConfig:
          commonAlphabet: string
          context:
            name: string
          cryptoKey:
            kmsWrapped:
              cryptoKeyRef:
                external: string
                name: string
                namespace: string
              wrappedKey: string
            transient:
              name: string
            unwrapped:
              key: string
          customAlphabet: string
          radix: integer
          surrogateInfoType:
            name: string
        dateShiftConfig:
          context:
            name: string
          cryptoKey:
            kmsWrapped:
              cryptoKeyRef:
                external: string
                name: string
                namespace: string
              wrappedKey: string
            transient:
              name: string
            unwrapped:
              key: string
          lowerBoundDays: integer
          upperBoundDays: integer
        fixedSizeBucketingConfig:
          bucketSize: float
          lowerBound:
            booleanValue: boolean
            dateValue:
              day: integer
              month: integer
              year: integer
            dayOfWeekValue: string
            floatValue: float
            integerValue: integer
            stringValue: string
            timeValue:
              hours: integer
              minutes: integer
              nanos: integer
              seconds: integer
            timestampValue: string
          upperBound:
            booleanValue: boolean
            dateValue:
              day: integer
              month: integer
              year: integer
            dayOfWeekValue: string
            floatValue: float
            integerValue: integer
            stringValue: string
            timeValue:
              hours: integer
              minutes: integer
              nanos: integer
              seconds: integer
            timestampValue: string
        redactConfig: {}
        replaceConfig:
          newValue:
            booleanValue: boolean
            dateValue:
              day: integer
              month: integer
              year: integer
            dayOfWeekValue: string
            floatValue: float
            integerValue: integer
            stringValue: string
            timeValue:
              hours: integer
              minutes: integer
              nanos: integer
              seconds: integer
            timestampValue: string
        replaceWithInfoTypeConfig: {}
        timePartConfig:
          partToExtract: string
  recordTransformations:
    fieldTransformations:
    - condition:
        expressions:
          conditions:
            conditions:
            - field:
                name: string
              operator: string
              value:
                booleanValue: boolean
                dateValue:
                  day: integer
                  month: integer
                  year: integer
                dayOfWeekValue: string
                floatValue: float
                integerValue: integer
                stringValue: string
                timeValue:
                  hours: integer
                  minutes: integer
                  nanos: integer
                  seconds: integer
                timestampValue: string
          logicalOperator: string
      fields:
      - name: string
      infoTypeTransformations:
        transformations:
        - infoTypes:
          - name: string
          primitiveTransformation:
            bucketingConfig:
              buckets:
              - max:
                  booleanValue: boolean
                  dateValue:
                    day: integer
                    month: integer
                    year: integer
                  dayOfWeekValue: string
                  floatValue: float
                  integerValue: integer
                  stringValue: string
                  timeValue:
                    hours: integer
                    minutes: integer
                    nanos: integer
                    seconds: integer
                  timestampValue: string
                min:
                  booleanValue: boolean
                  dateValue:
                    day: integer
                    month: integer
                    year: integer
                  dayOfWeekValue: string
                  floatValue: float
                  integerValue: integer
                  stringValue: string
                  timeValue:
                    hours: integer
                    minutes: integer
                    nanos: integer
                    seconds: integer
                  timestampValue: string
                replacementValue:
                  booleanValue: boolean
                  dateValue:
                    day: integer
                    month: integer
                    year: integer
                  dayOfWeekValue: string
                  floatValue: float
                  integerValue: integer
                  stringValue: string
                  timeValue:
                    hours: integer
                    minutes: integer
                    nanos: integer
                    seconds: integer
                  timestampValue: string
            characterMaskConfig:
              charactersToIgnore:
              - charactersToSkip: string
                commonCharactersToIgnore: string
              maskingCharacter: string
              numberToMask: integer
              reverseOrder: boolean
            cryptoDeterministicConfig:
              context:
                name: string
              cryptoKey:
                kmsWrapped:
                  cryptoKeyRef:
                    external: string
                    name: string
                    namespace: string
                  wrappedKey: string
                transient:
                  name: string
                unwrapped:
                  key: string
              surrogateInfoType:
                name: string
            cryptoHashConfig:
              cryptoKey:
                kmsWrapped:
                  cryptoKeyRef:
                    external: string
                    name: string
                    namespace: string
                  wrappedKey: string
                transient:
                  name: string
                unwrapped:
                  key: string
            cryptoReplaceFfxFpeConfig:
              commonAlphabet: string
              context:
                name: string
              cryptoKey:
                kmsWrapped:
                  cryptoKeyRef:
                    external: string
                    name: string
                    namespace: string
                  wrappedKey: string
                transient:
                  name: string
                unwrapped:
                  key: string
              customAlphabet: string
              radix: integer
              surrogateInfoType:
                name: string
            dateShiftConfig:
              context:
                name: string
              cryptoKey:
                kmsWrapped:
                  cryptoKeyRef:
                    external: string
                    name: string
                    namespace: string
                  wrappedKey: string
                transient:
                  name: string
                unwrapped:
                  key: string
              lowerBoundDays: integer
              upperBoundDays: integer
            fixedSizeBucketingConfig:
              bucketSize: float
              lowerBound:
                booleanValue: boolean
                dateValue:
                  day: integer
                  month: integer
                  year: integer
                dayOfWeekValue: string
                floatValue: float
                integerValue: integer
                stringValue: string
                timeValue:
                  hours: integer
                  minutes: integer
                  nanos: integer
                  seconds: integer
                timestampValue: string
              upperBound:
                booleanValue: boolean
                dateValue:
                  day: integer
                  month: integer
                  year: integer
                dayOfWeekValue: string
                floatValue: float
                integerValue: integer
                stringValue: string
                timeValue:
                  hours: integer
                  minutes: integer
                  nanos: integer
                  seconds: integer
                timestampValue: string
            redactConfig: {}
            replaceConfig:
              newValue:
                booleanValue: boolean
                dateValue:
                  day: integer
                  month: integer
                  year: integer
                dayOfWeekValue: string
                floatValue: float
                integerValue: integer
                stringValue: string
                timeValue:
                  hours: integer
                  minutes: integer
                  nanos: integer
                  seconds: integer
                timestampValue: string
            replaceWithInfoTypeConfig: {}
            timePartConfig:
              partToExtract: string
      primitiveTransformation:
        bucketingConfig:
          buckets:
          - max:
              booleanValue: boolean
              dateValue:
                day: integer
                month: integer
                year: integer
              dayOfWeekValue: string
              floatValue: float
              integerValue: integer
              stringValue: string
              timeValue:
                hours: integer
                minutes: integer
                nanos: integer
                seconds: integer
              timestampValue: string
            min:
              booleanValue: boolean
              dateValue:
                day: integer
                month: integer
                year: integer
              dayOfWeekValue: string
              floatValue: float
              integerValue: integer
              stringValue: string
              timeValue:
                hours: integer
                minutes: integer
                nanos: integer
                seconds: integer
              timestampValue: string
            replacementValue:
              booleanValue: boolean
              dateValue:
                day: integer
                month: integer
                year: integer
              dayOfWeekValue: string
              floatValue: float
              integerValue: integer
              stringValue: string
              timeValue:
                hours: integer
                minutes: integer
                nanos: integer
                seconds: integer
              timestampValue: string
        characterMaskConfig:
          charactersToIgnore:
          - charactersToSkip: string
            commonCharactersToIgnore: string
          maskingCharacter: string
          numberToMask: integer
          reverseOrder: boolean
        cryptoDeterministicConfig:
          context:
            name: string
          cryptoKey:
            kmsWrapped:
              cryptoKeyRef:
                external: string
                name: string
                namespace: string
              wrappedKey: string
            transient:
              name: string
            unwrapped:
              key: string
          surrogateInfoType:
            name: string
        cryptoHashConfig:
          cryptoKey:
            kmsWrapped:
              cryptoKeyRef:
                external: string
                name: string
                namespace: string
              wrappedKey: string
            transient:
              name: string
            unwrapped:
              key: string
        cryptoReplaceFfxFpeConfig:
          commonAlphabet: string
          context:
            name: string
          cryptoKey:
            kmsWrapped:
              cryptoKeyRef:
                external: string
                name: string
                namespace: string
              wrappedKey: string
            transient:
              name: string
            unwrapped:
              key: string
          customAlphabet: string
          radix: integer
          surrogateInfoType:
            name: string
        dateShiftConfig:
          context:
            name: string
          cryptoKey:
            kmsWrapped:
              cryptoKeyRef:
                external: string
                name: string
                namespace: string
              wrappedKey: string
            transient:
              name: string
            unwrapped:
              key: string
          lowerBoundDays: integer
          upperBoundDays: integer
        fixedSizeBucketingConfig:
          bucketSize: float
          lowerBound:
            booleanValue: boolean
            dateValue:
              day: integer
              month: integer
              year: integer
            dayOfWeekValue: string
            floatValue: float
            integerValue: integer
            stringValue: string
            timeValue:
              hours: integer
              minutes: integer
              nanos: integer
              seconds: integer
            timestampValue: string
          upperBound:
            booleanValue: boolean
            dateValue:
              day: integer
              month: integer
              year: integer
            dayOfWeekValue: string
            floatValue: float
            integerValue: integer
            stringValue: string
            timeValue:
              hours: integer
              minutes: integer
              nanos: integer
              seconds: integer
            timestampValue: string
        redactConfig: {}
        replaceConfig:
          newValue:
            booleanValue: boolean
            dateValue:
              day: integer
              month: integer
              year: integer
            dayOfWeekValue: string
            floatValue: float
            integerValue: integer
            stringValue: string
            timeValue:
              hours: integer
              minutes: integer
              nanos: integer
              seconds: integer
            timestampValue: string
        replaceWithInfoTypeConfig: {}
        timePartConfig:
          partToExtract: string
    recordSuppressions:
    - condition:
        expressions:
          conditions:
            conditions:
            - field:
                name: string
              operator: string
              value:
                booleanValue: boolean
                dateValue:
                  day: integer
                  month: integer
                  year: integer
                dayOfWeekValue: string
                floatValue: float
                integerValue: integer
                stringValue: string
                timeValue:
                  hours: integer
                  minutes: integer
                  nanos: integer
                  seconds: integer
                timestampValue: string
          logicalOperator: string
  transformationErrorHandling:
    leaveUntransformed: {}
    throwError: {}
description: string
displayName: string
location: string
organizationRef:
  external: string
  name: string
  namespace: string
projectRef:
  external: string
  name: string
  namespace: string
resourceID: string
Fields

deidentifyConfig

Optional

object

The core content of the template.

deidentifyConfig.infoTypeTransformations

Optional

object

Treat the dataset as free-form text and apply the same free text transformation everywhere.

deidentifyConfig.infoTypeTransformations.transformations

Required*

list (object)

Required. Transformation for each infoType. Cannot specify more than one for a given infoType.

deidentifyConfig.infoTypeTransformations.transformations[]

Required*

object

deidentifyConfig.infoTypeTransformations.transformations[].infoTypes

Optional

list (object)

InfoTypes to apply the transformation to. An empty list will cause this transformation to apply to all findings that correspond to infoTypes that were requested in `InspectConfig`.

deidentifyConfig.infoTypeTransformations.transformations[].infoTypes[]

Optional

object

deidentifyConfig.infoTypeTransformations.transformations[].infoTypes[].name

Optional

string

Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation

Required*

object

Required. Primitive transformation to apply to the infoType.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig

Optional

object

Bucketing

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets

Optional

list (object)

Set of buckets. Ranges must be non-overlapping.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[]

Optional

object

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max

Optional

object

Upper bound of the range, exclusive; type must match min.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.booleanValue

Optional

boolean

boolean

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue

Optional

object

date

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.floatValue

Optional

float

float

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.integerValue

Optional

integer

integer

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.stringValue

Optional

string

string

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue

Optional

object

time of day

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timestampValue

Optional

string

timestamp

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min

Optional

object

Lower bound of the range, inclusive. Type should be the same as max if used.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.booleanValue

Optional

boolean

boolean

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue

Optional

object

date

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.floatValue

Optional

float

float

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.integerValue

Optional

integer

integer

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.stringValue

Optional

string

string

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue

Optional

object

time of day

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timestampValue

Optional

string

timestamp

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue

Required*

object

Required. Replacement value for this bucket.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.booleanValue

Optional

boolean

boolean

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue

Optional

object

date

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.floatValue

Optional

float

float

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.integerValue

Optional

integer

integer

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.stringValue

Optional

string

string

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue

Optional

object

time of day

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timestampValue

Optional

string

timestamp

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig

Optional

object

Mask

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore

Optional

list (object)

When masking a string, items in this list will be skipped when replacing characters. For example, if the input string is `555-555-5555` and you instruct Cloud DLP to skip `-` and mask 5 characters with `*`, Cloud DLP returns `***-**5-5555`.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore[]

Optional

object

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore[].charactersToSkip

Optional

string

Characters to not transform when masking.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore[].commonCharactersToIgnore

Optional

string

Common characters to not transform when masking. Useful to avoid removing punctuation. Possible values: COMMON_CHARS_TO_IGNORE_UNSPECIFIED, NUMERIC, ALPHA_UPPER_CASE, ALPHA_LOWER_CASE, PUNCTUATION, WHITESPACE

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.maskingCharacter

Optional

string

Character to use to mask the sensitive values—for example, `*` for an alphabetic string such as a name, or `0` for a numeric string such as ZIP code or credit card number. This string must have a length of 1. If not supplied, this value defaults to `*` for strings, and `0` for digits.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.numberToMask

Optional

integer

Number of characters to mask. If not set, all matching chars will be masked. Skipped characters do not count towards this tally.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.reverseOrder

Optional

boolean

Mask characters in reverse order. For example, if `masking_character` is `0`, `number_to_mask` is `14`, and `reverse_order` is `false`, then the input string `1234-5678-9012-3456` is masked as `00000000000000-3456`. If `masking_character` is `*`, `number_to_mask` is `3`, and `reverse_order` is `true`, then the string `12345` is masked as `12***`.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig

Optional

object

Deterministic Crypto

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.context

Optional

object

A context may be used for higher security and maintaining referential integrity such that the same identifier in two different contexts will be given a distinct surrogate. The context is appended to plaintext value being encrypted. On decryption the provided context is validated against the value used during encryption. If a context was provided during encryption, same context must be provided during decryption as well. If the context is not set, plaintext would be used as is for encryption. If the context is set but: 1. there is no record present when transforming a given value or 2. the field is not present when transforming a given value, plaintext would be used as is for encryption. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.context.name

Optional

string

Name describing the field.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey

Optional

object

The key used by the encryption function. For deterministic encryption using AES-SIV, the provided key is internally expanded to 64 bytes prior to use.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.surrogateInfoType

Optional

object

The custom info type to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom info type followed by the number of characters comprising the surrogate. The following scheme defines the format: {info type name}({surrogate character count}):{surrogate} For example, if the name of custom info type is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc' This annotation identifies the surrogate when inspecting content using the custom info type 'Surrogate'. This facilitates reversal of the surrogate when it occurs in free text. Note: For record transformations where the entire cell in a table is being transformed, surrogates are not mandatory. Surrogates are used to denote the location of the token and are necessary for re-identification in free form text. In order for inspection to work properly, the name of this info type must not occur naturally anywhere in your data; otherwise, inspection may either - reverse a surrogate that does not correspond to an actual identifier - be unable to parse the surrogate and result in an error Therefore, choose your custom info type name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.surrogateInfoType.name

Optional

string

Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig

Optional

object

Crypto

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey

Optional

object

The key used by the hash function.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig

Optional

object

Ffx-Fpe

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.commonAlphabet

Optional

string

Common alphabets. Possible values: FFX_COMMON_NATIVE_ALPHABET_UNSPECIFIED, NUMERIC, HEXADECIMAL, UPPER_CASE_ALPHA_NUMERIC, ALPHA_NUMERIC

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.context

Optional

object

The 'tweak', a context may be used for higher security since the same identifier in two different contexts won't be given the same surrogate. If the context is not set, a default tweak will be used. If the context is set but: 1. there is no record present when transforming a given value or 1. the field is not present when transforming a given value, a default tweak will be used. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s. Currently, the referenced field may be of value type integer or string. The tweak is constructed as a sequence of bytes in big endian byte order such that: - a 64 bit integer is encoded followed by a single byte of value 1 - a string is encoded in UTF-8 format followed by a single byte of value 2

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.context.name

Optional

string

Name describing the field.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey

Required*

object

Required. The key used by the encryption algorithm.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.customAlphabet

Optional

string

This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports. This happens before/after encryption/decryption. Each character listed must appear only once. Number of characters must be in the range [2, 95]. This must be encoded as ASCII. The order of characters does not matter. The full list of allowed characters is: ``0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~`!@#$%^&*()_-+={[}]|:;"'<,>.?/``

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.radix

Optional

integer

The native way to select the alphabet. Must be in the range [2, 95].

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.surrogateInfoType

Optional

object

The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc' This annotation identifies the surrogate when inspecting content using the custom infoType [`SurrogateType`](https://cloud.google.com/dlp/docs/reference/rest/v2/InspectConfig#surrogatetype). This facilitates reversal of the surrogate when it occurs in free text. In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.surrogateInfoType.name

Optional

string

Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig

Optional

object

Date Shift

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.context

Optional

object

Points to the field that contains the context, for example, an entity id. If set, must also set cryptoKey. If set, shift will be consistent for the given context.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.context.name

Optional

string

Name describing the field.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey

Optional

object

Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and crypto_key. If set, must also set context. Can only be applied to table items.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.lowerBoundDays

Required*

integer

Required. For example, -5 means shift date to at most 5 days back in the past.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.upperBoundDays

Required*

integer

Required. Range of shift in days. Actual shift will be selected at random within this range (inclusive ends). Negative means shift to earlier in time. Must not be more than 365250 days (1000 years) each direction. For example, 3 means shift date to at most 3 days into the future.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig

Optional

object

Fixed size bucketing

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.bucketSize

Required*

float

Required. Size of each bucket (except for minimum and maximum buckets). So if `lower_bound` = 10, `upper_bound` = 89, and `bucket_size` = 10, then the following buckets would be used: -10, 10-20, 20-30, 30-40, 40-50, 50-60, 60-70, 70-80, 80-89, 89+. Precision up to 2 decimals works.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound

Required*

object

Required. Lower bound value of buckets. All values less than `lower_bound` are grouped together into a single bucket; for example if `lower_bound` = 10, then all values less than 10 are replaced with the value "-10".

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.booleanValue

Optional

boolean

boolean

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue

Optional

object

date

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.floatValue

Optional

float

float

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.integerValue

Optional

integer

integer

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.stringValue

Optional

string

string

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue

Optional

object

time of day

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timestampValue

Optional

string

timestamp

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound

Required*

object

Required. Upper bound value of buckets. All values greater than upper_bound are grouped together into a single bucket; for example if `upper_bound` = 89, then all values greater than 89 are replaced with the value "89+".

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.booleanValue

Optional

boolean

boolean

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue

Optional

object

date

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.floatValue

Optional

float

float

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.integerValue

Optional

integer

integer

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.stringValue

Optional

string

string

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue

Optional

object

time of day

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timestampValue

Optional

string

timestamp

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.redactConfig

Optional

object

Redact

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig

Optional

object

Replace with a specified value.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue

Optional

object

Value to replace it with.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.booleanValue

Optional

boolean

boolean

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.dateValue

Optional

object

date

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.floatValue

Optional

float

float

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.integerValue

Optional

integer

integer

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.stringValue

Optional

string

string

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timeValue

Optional

object

time of day

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timestampValue

Optional

string

timestamp

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.replaceWithInfoTypeConfig

Optional

object

Replace with infotype

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.timePartConfig

Optional

object

Time extraction

deidentifyConfig.infoTypeTransformations.transformations[].primitiveTransformation.timePartConfig.partToExtract

Optional

string

The part of the time to keep. Possible values: TIME_PART_UNSPECIFIED, YEAR, MONTH, DAY_OF_MONTH, DAY_OF_WEEK, WEEK_OF_YEAR, HOUR_OF_DAY

deidentifyConfig.recordTransformations

Optional

object

Treat the dataset as structured. Transformations can be applied to specific locations within structured datasets, such as transforming a column within a table.

deidentifyConfig.recordTransformations.fieldTransformations

Optional

list (object)

Transform the record by applying various field transformations.

deidentifyConfig.recordTransformations.fieldTransformations[]

Optional

object

deidentifyConfig.recordTransformations.fieldTransformations[].condition

Optional

object

Only apply the transformation if the condition evaluates to true for the given `RecordCondition`. The conditions are allowed to reference fields that are not used in the actual transformation. Example Use Cases: - Apply a different bucket transformation to an age column if the zip code column for the same record is within a specific range. - Redact a field if the date of birth field is greater than 85.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions

Optional

object

An expression.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions

Optional

object

Conditions to apply to the expression.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions

Optional

list (object)

A collection of conditions.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[]

Optional

object

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].field

Required*

object

Required. Field within the record this condition is evaluated against.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].field.name

Optional

string

Name describing the field.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].operator

Required*

string

Required. Operator used to compare the field or infoType to the value. Possible values: LOGICAL_OPERATOR_UNSPECIFIED, AND

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value

Optional

object

Value to compare against. [Mandatory, except for `EXISTS` tests.]

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.conditions.conditions[].value.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].condition.expressions.logicalOperator

Optional

string

The operator to apply to the result of conditions. Default and currently only supported value is `AND`. Possible values: LOGICAL_OPERATOR_UNSPECIFIED, AND

deidentifyConfig.recordTransformations.fieldTransformations[].fields

Required*

list (object)

Required. Input field(s) to apply the transformation to. When you have columns that reference their position within a list, omit the index from the FieldId. FieldId name matching ignores the index. For example, instead of "contact.nums[0].type", use "contact.nums.type".

deidentifyConfig.recordTransformations.fieldTransformations[].fields[]

Required*

object

deidentifyConfig.recordTransformations.fieldTransformations[].fields[].name

Optional

string

Name describing the field.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations

Optional

object

Treat the contents of the field as free text, and selectively transform content that matches an `InfoType`.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations

Required*

list (object)

Required. Transformation for each infoType. Cannot specify more than one for a given infoType.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[]

Required*

object

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].infoTypes

Optional

list (object)

InfoTypes to apply the transformation to. An empty list will cause this transformation to apply to all findings that correspond to infoTypes that were requested in `InspectConfig`.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].infoTypes[]

Optional

object

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].infoTypes[].name

Optional

string

Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation

Required*

object

Required. Primitive transformation to apply to the infoType.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig

Optional

object

Bucketing

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets

Optional

list (object)

Set of buckets. Ranges must be non-overlapping.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[]

Optional

object

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max

Optional

object

Upper bound of the range, exclusive; type must match min.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].max.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min

Optional

object

Lower bound of the range, inclusive. Type should be the same as max if used.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].min.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue

Required*

object

Required. Replacement value for this bucket.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig

Optional

object

Mask

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore

Optional

list (object)

When masking a string, items in this list will be skipped when replacing characters. For example, if the input string is `555-555-5555` and you instruct Cloud DLP to skip `-` and mask 5 characters with `*`, Cloud DLP returns `***-**5-5555`.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore[]

Optional

object

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore[].charactersToSkip

Optional

string

Characters to not transform when masking.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore[].commonCharactersToIgnore

Optional

string

Common characters to not transform when masking. Useful to avoid removing punctuation. Possible values: COMMON_CHARS_TO_IGNORE_UNSPECIFIED, NUMERIC, ALPHA_UPPER_CASE, ALPHA_LOWER_CASE, PUNCTUATION, WHITESPACE

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.maskingCharacter

Optional

string

Character to use to mask the sensitive values—for example, `*` for an alphabetic string such as a name, or `0` for a numeric string such as ZIP code or credit card number. This string must have a length of 1. If not supplied, this value defaults to `*` for strings, and `0` for digits.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.numberToMask

Optional

integer

Number of characters to mask. If not set, all matching chars will be masked. Skipped characters do not count towards this tally.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.characterMaskConfig.reverseOrder

Optional

boolean

Mask characters in reverse order. For example, if `masking_character` is `0`, `number_to_mask` is `14`, and `reverse_order` is `false`, then the input string `1234-5678-9012-3456` is masked as `00000000000000-3456`. If `masking_character` is `*`, `number_to_mask` is `3`, and `reverse_order` is `true`, then the string `12345` is masked as `12***`.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig

Optional

object

Deterministic Crypto

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.context

Optional

object

A context may be used for higher security and maintaining referential integrity such that the same identifier in two different contexts will be given a distinct surrogate. The context is appended to plaintext value being encrypted. On decryption the provided context is validated against the value used during encryption. If a context was provided during encryption, same context must be provided during decryption as well. If the context is not set, plaintext would be used as is for encryption. If the context is set but: 1. there is no record present when transforming a given value or 2. the field is not present when transforming a given value, plaintext would be used as is for encryption. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.context.name

Optional

string

Name describing the field.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey

Optional

object

The key used by the encryption function. For deterministic encryption using AES-SIV, the provided key is internally expanded to 64 bytes prior to use.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.surrogateInfoType

Optional

object

The custom info type to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom info type followed by the number of characters comprising the surrogate. The following scheme defines the format: {info type name}({surrogate character count}):{surrogate} For example, if the name of custom info type is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc' This annotation identifies the surrogate when inspecting content using the custom info type 'Surrogate'. This facilitates reversal of the surrogate when it occurs in free text. Note: For record transformations where the entire cell in a table is being transformed, surrogates are not mandatory. Surrogates are used to denote the location of the token and are necessary for re-identification in free form text. In order for inspection to work properly, the name of this info type must not occur naturally anywhere in your data; otherwise, inspection may either - reverse a surrogate that does not correspond to an actual identifier - be unable to parse the surrogate and result in an error Therefore, choose your custom info type name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoDeterministicConfig.surrogateInfoType.name

Optional

string

Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig

Optional

object

Crypto

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey

Optional

object

The key used by the hash function.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig

Optional

object

Ffx-Fpe

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.commonAlphabet

Optional

string

Common alphabets. Possible values: FFX_COMMON_NATIVE_ALPHABET_UNSPECIFIED, NUMERIC, HEXADECIMAL, UPPER_CASE_ALPHA_NUMERIC, ALPHA_NUMERIC

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.context

Optional

object

The 'tweak', a context may be used for higher security since the same identifier in two different contexts won't be given the same surrogate. If the context is not set, a default tweak will be used. If the context is set but: 1. there is no record present when transforming a given value or 1. the field is not present when transforming a given value, a default tweak will be used. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s. Currently, the referenced field may be of value type integer or string. The tweak is constructed as a sequence of bytes in big endian byte order such that: - a 64 bit integer is encoded followed by a single byte of value 1 - a string is encoded in UTF-8 format followed by a single byte of value 2

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.context.name

Optional

string

Name describing the field.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey

Required*

object

Required. The key used by the encryption algorithm.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.customAlphabet

Optional

string

This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports. This happens before/after encryption/decryption. Each character listed must appear only once. Number of characters must be in the range [2, 95]. This must be encoded as ASCII. The order of characters does not matter. The full list of allowed characters is: ``0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~`!@#$%^&*()_-+={[}]|:;"'<,>.?/``

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.radix

Optional

integer

The native way to select the alphabet. Must be in the range [2, 95].

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.surrogateInfoType

Optional

object

The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc' This annotation identifies the surrogate when inspecting content using the custom infoType [`SurrogateType`](https://cloud.google.com/dlp/docs/reference/rest/v2/InspectConfig#surrogatetype). This facilitates reversal of the surrogate when it occurs in free text. In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.surrogateInfoType.name

Optional

string

Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig

Optional

object

Date Shift

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.context

Optional

object

Points to the field that contains the context, for example, an entity id. If set, must also set cryptoKey. If set, shift will be consistent for the given context.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.context.name

Optional

string

Name describing the field.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey

Optional

object

Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and crypto_key. If set, must also set context. Can only be applied to table items.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.lowerBoundDays

Required*

integer

Required. For example, -5 means shift date to at most 5 days back in the past.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.dateShiftConfig.upperBoundDays

Required*

integer

Required. Range of shift in days. Actual shift will be selected at random within this range (inclusive ends). Negative means shift to earlier in time. Must not be more than 365250 days (1000 years) each direction. For example, 3 means shift date to at most 3 days into the future.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig

Optional

object

Fixed size bucketing

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.bucketSize

Required*

float

Required. Size of each bucket (except for minimum and maximum buckets). So if `lower_bound` = 10, `upper_bound` = 89, and `bucket_size` = 10, then the following buckets would be used: -10, 10-20, 20-30, 30-40, 40-50, 50-60, 60-70, 70-80, 80-89, 89+. Precision up to 2 decimals works.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound

Required*

object

Required. Lower bound value of buckets. All values less than `lower_bound` are grouped together into a single bucket; for example if `lower_bound` = 10, then all values less than 10 are replaced with the value "-10".

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound

Required*

object

Required. Upper bound value of buckets. All values greater than upper_bound are grouped together into a single bucket; for example if `upper_bound` = 89, then all values greater than 89 are replaced with the value "89+".

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.redactConfig

Optional

object

Redact

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig

Optional

object

Replace with a specified value.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue

Optional

object

Value to replace it with.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceConfig.newValue.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.replaceWithInfoTypeConfig

Optional

object

Replace with infotype

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.timePartConfig

Optional

object

Time extraction

deidentifyConfig.recordTransformations.fieldTransformations[].infoTypeTransformations.transformations[].primitiveTransformation.timePartConfig.partToExtract

Optional

string

The part of the time to keep. Possible values: TIME_PART_UNSPECIFIED, YEAR, MONTH, DAY_OF_MONTH, DAY_OF_WEEK, WEEK_OF_YEAR, HOUR_OF_DAY

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation

Optional

object

Apply the transformation to the entire field.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig

Optional

object

Bucketing

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets

Optional

list (object)

Set of buckets. Ranges must be non-overlapping.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[]

Optional

object

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max

Optional

object

Upper bound of the range, exclusive; type must match min.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].max.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min

Optional

object

Lower bound of the range, inclusive. Type should be the same as max if used.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].min.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue

Required*

object

Required. Replacement value for this bucket.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.bucketingConfig.buckets[].replacementValue.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.characterMaskConfig

Optional

object

Mask

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore

Optional

list (object)

When masking a string, items in this list will be skipped when replacing characters. For example, if the input string is `555-555-5555` and you instruct Cloud DLP to skip `-` and mask 5 characters with `*`, Cloud DLP returns `***-**5-5555`.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore[]

Optional

object

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore[].charactersToSkip

Optional

string

Characters to not transform when masking.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.characterMaskConfig.charactersToIgnore[].commonCharactersToIgnore

Optional

string

Common characters to not transform when masking. Useful to avoid removing punctuation. Possible values: COMMON_CHARS_TO_IGNORE_UNSPECIFIED, NUMERIC, ALPHA_UPPER_CASE, ALPHA_LOWER_CASE, PUNCTUATION, WHITESPACE

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.characterMaskConfig.maskingCharacter

Optional

string

Character to use to mask the sensitive values—for example, `*` for an alphabetic string such as a name, or `0` for a numeric string such as ZIP code or credit card number. This string must have a length of 1. If not supplied, this value defaults to `*` for strings, and `0` for digits.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.characterMaskConfig.numberToMask

Optional

integer

Number of characters to mask. If not set, all matching chars will be masked. Skipped characters do not count towards this tally.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.characterMaskConfig.reverseOrder

Optional

boolean

Mask characters in reverse order. For example, if `masking_character` is `0`, `number_to_mask` is `14`, and `reverse_order` is `false`, then the input string `1234-5678-9012-3456` is masked as `00000000000000-3456`. If `masking_character` is `*`, `number_to_mask` is `3`, and `reverse_order` is `true`, then the string `12345` is masked as `12***`.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig

Optional

object

Deterministic Crypto

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.context

Optional

object

A context may be used for higher security and maintaining referential integrity such that the same identifier in two different contexts will be given a distinct surrogate. The context is appended to plaintext value being encrypted. On decryption the provided context is validated against the value used during encryption. If a context was provided during encryption, same context must be provided during decryption as well. If the context is not set, plaintext would be used as is for encryption. If the context is set but: 1. there is no record present when transforming a given value or 2. the field is not present when transforming a given value, plaintext would be used as is for encryption. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.context.name

Optional

string

Name describing the field.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey

Optional

object

The key used by the encryption function. For deterministic encryption using AES-SIV, the provided key is internally expanded to 64 bytes prior to use.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.surrogateInfoType

Optional

object

The custom info type to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom info type followed by the number of characters comprising the surrogate. The following scheme defines the format: {info type name}({surrogate character count}):{surrogate} For example, if the name of custom info type is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc' This annotation identifies the surrogate when inspecting content using the custom info type 'Surrogate'. This facilitates reversal of the surrogate when it occurs in free text. Note: For record transformations where the entire cell in a table is being transformed, surrogates are not mandatory. Surrogates are used to denote the location of the token and are necessary for re-identification in free form text. In order for inspection to work properly, the name of this info type must not occur naturally anywhere in your data; otherwise, inspection may either - reverse a surrogate that does not correspond to an actual identifier - be unable to parse the surrogate and result in an error Therefore, choose your custom info type name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoDeterministicConfig.surrogateInfoType.name

Optional

string

Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig

Optional

object

Crypto

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey

Optional

object

The key used by the hash function.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoHashConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig

Optional

object

Ffx-Fpe

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.commonAlphabet

Optional

string

Common alphabets. Possible values: FFX_COMMON_NATIVE_ALPHABET_UNSPECIFIED, NUMERIC, HEXADECIMAL, UPPER_CASE_ALPHA_NUMERIC, ALPHA_NUMERIC

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.context

Optional

object

The 'tweak', a context may be used for higher security since the same identifier in two different contexts won't be given the same surrogate. If the context is not set, a default tweak will be used. If the context is set but: 1. there is no record present when transforming a given value or 1. the field is not present when transforming a given value, a default tweak will be used. Note that case (1) is expected when an `InfoTypeTransformation` is applied to both structured and non-structured `ContentItem`s. Currently, the referenced field may be of value type integer or string. The tweak is constructed as a sequence of bytes in big endian byte order such that: - a 64 bit integer is encoded followed by a single byte of value 1 - a string is encoded in UTF-8 format followed by a single byte of value 2

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.context.name

Optional

string

Name describing the field.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey

Required*

object

Required. The key used by the encryption algorithm.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.customAlphabet

Optional

string

This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports. This happens before/after encryption/decryption. Each character listed must appear only once. Number of characters must be in the range [2, 95]. This must be encoded as ASCII. The order of characters does not matter. The full list of allowed characters is: ``0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~`!@#$%^&*()_-+={[}]|:;"'<,>.?/``

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.radix

Optional

integer

The native way to select the alphabet. Must be in the range [2, 95].

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.surrogateInfoType

Optional

object

The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc' This annotation identifies the surrogate when inspecting content using the custom infoType [`SurrogateType`](https://cloud.google.com/dlp/docs/reference/rest/v2/InspectConfig#surrogatetype). This facilitates reversal of the surrogate when it occurs in free text. In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.cryptoReplaceFfxFpeConfig.surrogateInfoType.name

Optional

string

Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. When sending Cloud DLP results to Data Catalog, infoType names should conform to the pattern `[A-Za-z0-9$-_]{1,64}`.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig

Optional

object

Date Shift

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.context

Optional

object

Points to the field that contains the context, for example, an entity id. If set, must also set cryptoKey. If set, shift will be consistent for the given context.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.context.name

Optional

string

Name describing the field.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey

Optional

object

Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and crypto_key. If set, must also set context. Can only be applied to table items.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped

Optional

object

Key wrapped using Cloud KMS

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef

Required*

object

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef.external

Optional

string

Required. The resource name of the KMS CryptoKey to use for unwrapping. Allowed value: The Google Cloud resource name of a `KMSCryptoKey` resource (format: `{{selfLink}}`).

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.cryptoKeyRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey.kmsWrapped.wrappedKey

Required*

string

Required. The wrapped data crypto key.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey.transient

Optional

object

Transient crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey.transient.name

Required*

string

Required. Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate `TransientCryptoKey` protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey.unwrapped

Optional

object

Unwrapped crypto key

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.cryptoKey.unwrapped.key

Required*

string

Required. A 128/192/256 bit key.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.lowerBoundDays

Required*

integer

Required. For example, -5 means shift date to at most 5 days back in the past.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.dateShiftConfig.upperBoundDays

Required*

integer

Required. Range of shift in days. Actual shift will be selected at random within this range (inclusive ends). Negative means shift to earlier in time. Must not be more than 365250 days (1000 years) each direction. For example, 3 means shift date to at most 3 days into the future.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig

Optional

object

Fixed size bucketing

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.bucketSize

Required*

float

Required. Size of each bucket (except for minimum and maximum buckets). So if `lower_bound` = 10, `upper_bound` = 89, and `bucket_size` = 10, then the following buckets would be used: -10, 10-20, 20-30, 30-40, 40-50, 50-60, 60-70, 70-80, 80-89, 89+. Precision up to 2 decimals works.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound

Required*

object

Required. Lower bound value of buckets. All values less than `lower_bound` are grouped together into a single bucket; for example if `lower_bound` = 10, then all values less than 10 are replaced with the value "-10".

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.lowerBound.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound

Required*

object

Required. Upper bound value of buckets. All values greater than upper_bound are grouped together into a single bucket; for example if `upper_bound` = 89, then all values greater than 89 are replaced with the value "89+".

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.fixedSizeBucketingConfig.upperBound.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.redactConfig

Optional

object

Redact

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig

Optional

object

Replace with a specified value.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue

Optional

object

Value to replace it with.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceConfig.newValue.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.replaceWithInfoTypeConfig

Optional

object

Replace with infotype

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.timePartConfig

Optional

object

Time extraction

deidentifyConfig.recordTransformations.fieldTransformations[].primitiveTransformation.timePartConfig.partToExtract

Optional

string

The part of the time to keep. Possible values: TIME_PART_UNSPECIFIED, YEAR, MONTH, DAY_OF_MONTH, DAY_OF_WEEK, WEEK_OF_YEAR, HOUR_OF_DAY

deidentifyConfig.recordTransformations.recordSuppressions

Optional

list (object)

Configuration defining which records get suppressed entirely. Records that match any suppression rule are omitted from the output.

deidentifyConfig.recordTransformations.recordSuppressions[]

Optional

object

deidentifyConfig.recordTransformations.recordSuppressions[].condition

Optional

object

A condition that when it evaluates to true will result in the record being evaluated to be suppressed from the transformed content.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions

Optional

object

An expression.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions

Optional

object

Conditions to apply to the expression.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions

Optional

list (object)

A collection of conditions.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[]

Optional

object

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].field

Required*

object

Required. Field within the record this condition is evaluated against.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].field.name

Optional

string

Name describing the field.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].operator

Required*

string

Required. Operator used to compare the field or infoType to the value. Possible values: LOGICAL_OPERATOR_UNSPECIFIED, AND

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value

Optional

object

Value to compare against. [Mandatory, except for `EXISTS` tests.]

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.booleanValue

Optional

boolean

boolean

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.dateValue

Optional

object

date

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.dateValue.day

Optional

integer

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.dateValue.month

Optional

integer

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.dateValue.year

Optional

integer

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.dayOfWeekValue

Optional

string

day of week Possible values: DAY_OF_WEEK_UNSPECIFIED, MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.floatValue

Optional

float

float

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.integerValue

Optional

integer

integer

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.stringValue

Optional

string

string

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.timeValue

Optional

object

time of day

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.timeValue.hours

Optional

integer

Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value "24:00:00" for scenarios like business closing time.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.timeValue.minutes

Optional

integer

Minutes of hour of day. Must be from 0 to 59.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.timeValue.nanos

Optional

integer

Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.timeValue.seconds

Optional

integer

Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.conditions.conditions[].value.timestampValue

Optional

string

timestamp

deidentifyConfig.recordTransformations.recordSuppressions[].condition.expressions.logicalOperator

Optional

string

The operator to apply to the result of conditions. Default and currently only supported value is `AND`. Possible values: LOGICAL_OPERATOR_UNSPECIFIED, AND

deidentifyConfig.transformationErrorHandling

Optional

object

Mode for handling transformation errors. If left unspecified, the default mode is `TransformationErrorHandling.ThrowError`.

deidentifyConfig.transformationErrorHandling.leaveUntransformed

Optional

object

Ignore errors

deidentifyConfig.transformationErrorHandling.throwError

Optional

object

Throw an error

description

Optional

string

Short description (max 256 chars).

displayName

Optional

string

Display name (max 256 chars).

location

Optional

string

Immutable. The location of the resource

organizationRef

Optional

object

Immutable. The Organization that this resource belongs to. Only one of [organizationRef, projectRef] may be specified.

organizationRef.external

Optional

string

Allowed value: The Google Cloud resource name of a Google Cloud Organization (format: `organizations/{{name}}`).

organizationRef.name

Optional

string

[WARNING] Organization not yet supported in Config Connector, use 'external' field to reference existing resources. Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

organizationRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

projectRef

Optional

object

Immutable. The Project that this resource belongs to. Only one of [organizationRef, projectRef] may be specified.

projectRef.external

Optional

string

Allowed value: The Google Cloud resource name of a `Project` resource (format: `projects/{{name}}`).

projectRef.name

Optional

string

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

projectRef.namespace

Optional

string

Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/

resourceID

Optional

string

Immutable. Optional. The service-generated name of the resource. Used for acquisition only. Leave unset to create a new resource.

* Field is required when parent field is specified

Status

Schema

conditions:
- lastTransitionTime: string
  message: string
  reason: string
  status: string
  type: string
createTime: string
locationId: string
observedGeneration: integer
updateTime: string
Fields
conditions

list (object)

Conditions represent the latest available observation of the resource's current state.

conditions[]

object

conditions[].lastTransitionTime

string

Last time the condition transitioned from one status to another.

conditions[].message

string

Human-readable message indicating details about last transition.

conditions[].reason

string

Unique, one-word, CamelCase reason for the condition's last transition.

conditions[].status

string

Status is the status of the condition. Can be True, False, Unknown.

conditions[].type

string

Type is the type of the condition.

createTime

string

Output only. The creation timestamp of an inspectTemplate.

locationId

string

Output only. The geographic location where this resource is stored.

observedGeneration

integer

ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource.

updateTime

string

Output only. The last update timestamp of an inspectTemplate.

Sample YAML(s)

Info Type Deidentify Template

# Copyright 2022 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

apiVersion: dlp.cnrm.cloud.google.com/v1beta1
kind: DLPDeidentifyTemplate
metadata:
  name: dlpdeidentifytemplate-sample-infotypedeidentifytemplate
spec:
  projectRef:
    # Replace "${PROJECT_ID?}" with your project ID
    external: "projects/${PROJECT_ID?}"
  displayName: "sample-template"
  description: "A sample deidentify template"
  deidentifyConfig:
    infoTypeTransformations:
      transformations:
      - infoTypes:
        - name: "PHONE_NUMBER"
        - name: "AGE"
        primitiveTransformation:
          replaceConfig:
            newValue:
              integerValue: 9
      - infoTypes:
        - name: "SALARY"
        primitiveTransformation:
          replaceConfig:
            newValue:
              floatValue: 192168.01
      - infoTypes:
        - name: "HOME_PAGE"
        primitiveTransformation:
          replaceConfig:
            newValue:
              stringValue: "https://www.example.com/"
      - infoTypes:
        - name: "RETIRED"
        primitiveTransformation:
          replaceConfig:
            newValue:
              booleanValue: true
      - infoTypes:
        - name: "LAST_LOGIN"
        primitiveTransformation:
          replaceConfig:
            newValue:
              timestampValue: "2014-10-02T15:01:23Z"
      - infoTypes:
        - name: "START_TIME"
        primitiveTransformation:
          replaceConfig:
            newValue:
              timeValue:
                hours: 9
                minutes: 30
                seconds: 0
                nanos: 0
      - infoTypes:
        - name: "DATE_OF_BIRTH"
        primitiveTransformation:
          replaceConfig:
            newValue:
              dateValue:
                year: 2020
                month: 1
                day: 1
      - infoTypes:
        - name: "PAYDAY"
        primitiveTransformation:
          replaceConfig:
            newValue:
              dayOfWeekValue: "FRIDAY"
      - infoTypes:
        - name: "HEIGHT"
        primitiveTransformation:
          redactConfig: {}
      - infoTypes:
        - name: "EMAIL_ADDRESS"
        - name: "LAST_NAME"
        primitiveTransformation:
          characterMaskConfig:
            maskingCharacter: "X"
            numberToMask: 4
            reverseOrder: true
            charactersToIgnore:
            - charactersToSkip: "#"
            - commonCharactersToIgnore: "PUNCTUATION"
      - infoTypes:
        - name: "HOME_ADDRESS"
        primitiveTransformation:
          cryptoReplaceFfxFpeConfig:
            context:
              name: "sometweak"
            cryptoKey:
              transient:
                name: "beep"
            surrogateInfoType:
              name: "abc"
            commonAlphabet: "NUMERIC"
      - infoTypes:
        - name: "BANK_ACCOUNT_NUMBER"
        primitiveTransformation:
          cryptoReplaceFfxFpeConfig:
            cryptoKey:
              unwrapped:
                key: "vJZQm1FyV4BdF99nlcUYNA=="
            customAlphabet: "~`!@#$%^&*()_-+={[}]|:;\"'<,>.?/"
      - infoTypes:
        - name: "BILLING_ADDRESS"
        primitiveTransformation:
          cryptoReplaceFfxFpeConfig:
            cryptoKey:
              kmsWrapped:
                wrappedKey: "vJZQm1FyV4BdF99nlcUYNA=="
                cryptoKeyRef:
                  name: "dlpdeidentifytemplate-dep-infotypedeidentifytemplate"
            radix: 4
      - infoTypes:
        - name: "FIRST_NAME"
        primitiveTransformation:
          fixedSizeBucketingConfig:
            lowerBound:
              integerValue: 7
            upperBound:
              integerValue: 9
            bucketSize: 2.5
      - infoTypes:
        - name: "MIDDLE_NAME"
        primitiveTransformation:
          bucketingConfig:
            buckets:
            - min:
                integerValue: 7
              max:
                integerValue: 9
              replacementValue:
                integerValue: 6
      - infoTypes:
        - name: "EYE_COLOR"
        primitiveTransformation:
          replaceWithInfoTypeConfig: {}
      - infoTypes:
        - name: "START_DATE"
        primitiveTransformation:
          timePartConfig:
            partToExtract: "YEAR"
      - infoTypes:
        - name: "CREDIT_CARD_NUMBER"
        primitiveTransformation:
          cryptoDeterministicConfig:
            context:
              name: "sometweak"
            cryptoKey:
              transient:
                name: "beep"
            surrogateInfoType:
              name: "abc"
      - infoTypes:
        - name: "LAST_VACATION"
        primitiveTransformation:
          dateShiftConfig:
            upperBoundDays: 3
            lowerBoundDays: 2
            context:
              name: "def"
            cryptoKey:
              transient:
                name: "beep"
---
apiVersion: kms.cnrm.cloud.google.com/v1beta1
kind: KMSCryptoKey
metadata:
  name: dlpdeidentifytemplate-dep-infotypedeidentifytemplate
spec:
  location: "global"
  keyRingRef:
    name: "dlpdeidentifytemplate-dep-infotypedeidentifytemplate"
  purpose: "ENCRYPT_DECRYPT"
---
apiVersion: kms.cnrm.cloud.google.com/v1beta1
kind: KMSKeyRing
metadata:
  name: dlpdeidentifytemplate-dep-infotypedeidentifytemplate
spec:
  location: "global"

Record Deidentify Template

# Copyright 2022 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

apiVersion: dlp.cnrm.cloud.google.com/v1beta1
kind: DLPDeidentifyTemplate
metadata:
  name: dlpdeidentifytemplate-sample-recorddeidentifytemplate
spec:
  organizationRef:
    # Replace "${ORG_ID?}" with the numeric ID for your organization
    external: "organizations/${ORG_ID?}"
  location: "us-west2"
  displayName: "sample-template"
  description: "A sample deidentify template"
  deidentifyConfig:
    recordTransformations:
      fieldTransformations:
      - fields:
        - name: "SPECIES"
        condition:
          expressions:
            logicalOperator: "AND"
            conditions:
              conditions:
              - field:
                  name: "BREED"
                operator: "NOT_EQUAL_TO"
                value:
                  stringValue: "PUG"
        primitiveTransformation:
          redactConfig: {}