Class Action (3.18.0)

Version 3.18.0

• 3.26.0 (latest)
• 3.25.1
• 3.24.0
• 3.23.0
• 3.22.0
• 3.20.0
• 3.19.0
• 3.18.1
• 3.17.0
• 3.16.0
• 3.15.3
• 3.14.0
• 3.13.0
• 3.12.3
• 3.11.1
• 3.10.1
• 3.9.2
• 3.8.1
• 3.7.1
• 3.6.2
• 3.5.0
• 3.4.0
• 3.3.1
• 3.2.4
• 3.1.1
• 3.0.1
• 2.0.2
• 1.0.2
• 0.15.2
• 0.14.0
• 0.13.0
• 0.12.1

Action(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A task to execute on the completion of a job. See https://cloud.google.com/sensitive-data-protection/docs/concepts-actions to learn more.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Attributes
Name	Description
save_findings	google.cloud.dlp_v2.types.Action.SaveFindings Save resulting findings in a provided location. This field is a member of oneof_ action.
pub_sub	google.cloud.dlp_v2.types.Action.PublishToPubSub Publish a notification to a Pub/Sub topic. This field is a member of oneof_ action.
publish_summary_to_cscc	google.cloud.dlp_v2.types.Action.PublishSummaryToCscc Publish summary to Cloud Security Command Center (Alpha). This field is a member of oneof_ action.
publish_findings_to_cloud_data_catalog	google.cloud.dlp_v2.types.Action.PublishFindingsToCloudDataCatalog Publish findings to Cloud Datahub. This field is a member of oneof_ action.
deidentify	google.cloud.dlp_v2.types.Action.Deidentify Create a de-identified copy of the input data. This field is a member of oneof_ action.
job_notification_emails	google.cloud.dlp_v2.types.Action.JobNotificationEmails Sends an email when the job completes. The email goes to IAM project owners and technical `Essential Contacts
publish_to_stackdriver	google.cloud.dlp_v2.types.Action.PublishToStackdriver Enable Stackdriver metric dlp.googleapis.com/finding_count. This field is a member of oneof_ action.

Classes

Deidentify

Deidentify(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Create a de-identified copy of the requested table or files.

A TransformationDetail will be created for each transformation.

If any rows in BigQuery are skipped during de-identification (transformation errors or row size exceeds BigQuery insert API limits) they are placed in the failure output table. If the original row exceeds the BigQuery insert API limit it will be truncated when written to the failure output table. The failure output table can be set in the action.deidentify.output.big_query_output.deidentified_failure_output_table field, if no table is set, a table will be automatically created in the same project and dataset as the original table.

Compatible with: Inspect

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

JobNotificationEmails

JobNotificationEmails(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Sends an email when the job completes. The email goes to IAM project owners and technical Essential Contacts <https://cloud.google.com/resource-manager/docs/managing-notification-contacts>__.

PublishFindingsToCloudDataCatalog

PublishFindingsToCloudDataCatalog(
    mapping=None, *, ignore_unknown_fields=False, **kwargs
)

Publish findings of a DlpJob to Data Catalog. In Data Catalog, tag templates are applied to the resource that Cloud DLP scanned. Data Catalog tag templates are stored in the same project and region where the BigQuery table exists. For Cloud DLP to create and apply the tag template, the Cloud DLP service agent must have the roles/datacatalog.tagTemplateOwner permission on the project. The tag template contains fields summarizing the results of the DlpJob. Any field values previously written by another DlpJob are deleted. InfoType naming patterns][google.privacy.dlp.v2.InfoType] are strictly enforced when using this feature.

Findings are persisted in Data Catalog storage and are governed by service-specific policies for Data Catalog. For more information, see Service Specific Terms <https://cloud.google.com/terms/service-terms>__.

Only a single instance of this action can be specified. This action is allowed only if all resources being scanned are BigQuery tables. Compatible with: Inspect

PublishSummaryToCscc

PublishSummaryToCscc(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Publish the result summary of a DlpJob to Security Command Center <https://cloud.google.com/security-command-center>. This action is available for only projects that belong to an organization. This action publishes the count of finding instances and their infoTypes. The summary of findings are persisted in Security Command Center and are governed by service-specific policies for Security Command Center <https://cloud.google.com/terms/service-terms>. Only a single instance of this action can be specified. Compatible with: Inspect

PublishToPubSub

PublishToPubSub(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Publish a message into a given Pub/Sub topic when DlpJob has completed. The message contains a single field, DlpJobName, which is equal to the finished job's `DlpJob.name https://cloud.google.com/sensitive-data-protection/docs/reference/rest/v2/projects.dlpJobs#DlpJob`__. Compatible with: Inspect, Risk

PublishToStackdriver

PublishToStackdriver(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Enable Stackdriver metric dlp.googleapis.com/finding_count. This will publish a metric to stack driver on each infotype requested and how many findings were found for it. CustomDetectors will be bucketed as 'Custom' under the Stackdriver label 'info_type'.

SaveFindings

SaveFindings(mapping=None, *, ignore_unknown_fields=False, **kwargs)

If set, the detailed findings will be persisted to the specified OutputStorageConfig. Only a single instance of this action can be specified. Compatible with: Inspect, Risk