Cloud Data Loss Prevention (Cloud DLP) is now a part of Sensitive Data Protection. The API name remains the same: Cloud Data Loss Prevention API (DLP API). For information about the services that make up Sensitive Data Protection, see Sensitive Data Protection overview.

Method: projects.locations.content.deidentify

HTTP request
Path parameters
Request body
- JSON representation
Response body
Authorization scopes
Try it!

De-identifies potentially sensitive info from a ContentItem. This method has limits on input size and output size. See https://cloud.google.com/sensitive-data-protection/docs/deidentify-sensitive-data to learn more.

When no InfoTypes or CustomInfoTypes are specified in this request, the system will automatically choose what detectors to run. By default this may be all types, but may change over time as detectors are updated.

HTTP request

Choose a location:

The URLs use gRPC Transcoding syntax.

Path parameters

Parameters

Parameters
`parent`	`string` Parent resource name. The format of this value varies depending on whether you have specified a processing location: Projects scope, location specified: `projects/{projectId}/locations/{locationId}` Projects scope, no location specified (defaults to global): `projects/{projectId}` The following example `parent` string specifies a parent project with the identifier `example-project`, and specifies the `europe-west3` location for processing data: `parent=projects/example-project/locations/europe-west3` Authorization requires the following IAM permission on the specified resource `parent`: `serviceusage.services.use`

parent

string

Parent resource name.

The format of this value varies depending on whether you have specified a processing location:

Projects scope, location specified: projects/{projectId}/locations/{locationId}
Projects scope, no location specified (defaults to global): projects/{projectId}

The following example parent string specifies a parent project with the identifier example-project, and specifies the europe-west3 location for processing data:

parent=projects/example-project/locations/europe-west3

Authorization requires the following IAM permission on the specified resource parent:

serviceusage.services.use

Request body

The request body contains data with the following structure:

JSON representation

JSON representation
{ "deidentifyConfig": { object (`DeidentifyConfig`) }, "inspectConfig": { object (`InspectConfig`) }, "item": { object (`ContentItem`) }, "inspectTemplateName": string, "deidentifyTemplateName": string, "locationId": string }

{
  "deidentifyConfig": {
    object (DeidentifyConfig)
  },
  "inspectConfig": {
    object (InspectConfig)
  },
  "item": {
    object (ContentItem)
  },
  "inspectTemplateName": string,
  "deidentifyTemplateName": string,
  "locationId": string
}

Fields
`deidentifyConfig`	`object (DeidentifyConfig)` Configuration for the de-identification of the content item. Items specified here will override the template referenced by the deidentifyTemplateName argument.
`inspectConfig`	`object (InspectConfig)` Configuration for the inspector. Items specified here will override the template referenced by the inspectTemplateName argument.
`item`	`object (ContentItem)` The item to de-identify. Will be treated as text. This value must be of type `Table` if your `deidentifyConfig` is a `RecordTransformations` object.
`inspectTemplateName`	`string` Template to use. Any configuration directly specified in inspectConfig will override those set in the template. Singular fields that are set in this request will replace their corresponding fields in the template. Repeated fields are appended. Singular sub-messages and groups are recursively merged.
`deidentifyTemplateName`	`string` Template to use. Any configuration directly specified in deidentifyConfig will override those set in the template. Singular fields that are set in this request will replace their corresponding fields in the template. Repeated fields are appended. Singular sub-messages and groups are recursively merged.
`locationId`	`string` Deprecated. This field has no effect.

Response body

If successful, the response body contains an instance of DeidentifyContentResponse.

Authorization scopes

Requires the following OAuth scope:

https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.