Create

Creates a new job to inspect storage or calculate risk metrics

69 variables
106 variables

Creates a new job to inspect storage or calculate risk metrics. See https://cloud.google.com/dlp/docs/inspecting-storage and https://cloud.google.com/dlp/docs/compute-risk-analysis to learn more.

When no InfoTypes or CustomInfoTypes are specified in inspect jobs, the system will automatically choose what detectors to run. By default this may be all types, but may change over time as detectors are updated

Authorization

To use this building block you will have to grant access to at least one of the following scopes:

  • View and manage your data across Google Cloud Platform services

Input

This building block consumes 69 input parameters

  = Parameter name
  = Format

parent STRING Required

The parent resource name, for example projects/my-project-id

inspectJob OBJECT

inspectJob.inspectConfig OBJECT

Configuration description of the scanning process. When used with redactContent only info_types and min_likelihood are currently used

inspectJob.inspectConfig.contentOptions[] ENUMERATION

inspectJob.inspectConfig.limits OBJECT

inspectJob.inspectConfig.limits.maxFindingsPerItem INTEGER

Max number of findings that will be returned for each item scanned. When set within InspectDataSourceRequest, the maximum returned is 2000 regardless if this is set higher. When set within InspectContentRequest, this field is ignored

inspectJob.inspectConfig.limits.maxFindingsPerRequest INTEGER

Max number of findings that will be returned per request/job. When set within InspectContentRequest, the maximum returned is 2000 regardless if this is set higher

inspectJob.inspectConfig.excludeInfoTypes BOOLEAN

When true, excludes type information of the findings

inspectJob.inspectConfig.minLikelihood ENUMERATION

Only returns findings equal or above this threshold. The default is POSSIBLE. See https://cloud.google.com/dlp/docs/likelihood to learn more

inspectJob.inspectConfig.ruleSet[] OBJECT

Rule set for modifying a set of infoTypes to alter behavior under certain circumstances, depending on the specific details of the rules within the set

inspectJob.inspectConfig.infoTypes[] OBJECT

Type of information detected by the API

inspectJob.inspectConfig.infoTypes[].name STRING

Name of the information type. Either a name of your choosing when creating a CustomInfoType, or one of the names listed at https://cloud.google.com/dlp/docs/infotypes-reference when specifying a built-in type. InfoType names should conform to the pattern [a-zA-Z0-9_]{1,64}

inspectJob.inspectConfig.includeQuote BOOLEAN

When true, a contextual quote from the data that triggered a finding is included in the response; see Finding.quote

inspectJob.inspectConfig.customInfoTypes[] OBJECT

Custom information type provided by the user. Used to find domain-specific sensitive information configurable to the data in question

inspectJob.inspectConfig.customInfoTypes[].likelihood ENUMERATION

Likelihood to return for this CustomInfoType. This base value can be altered by a detection rule if the finding meets the criteria specified by the rule. Defaults to VERY_LIKELY if not specified

inspectJob.inspectConfig.customInfoTypes[].exclusionType ENUMERATION

If set to EXCLUSION_TYPE_EXCLUDE this infoType will not cause a finding to be returned. It still can be used for rules matching

inspectJob.inspectTemplateName STRING

If provided, will be used as the default for all values in InspectConfig. inspect_config will be merged into the values persisted as part of the template

inspectJob.storageConfig OBJECT

Shared message indicating Cloud storage type

inspectJob.storageConfig.datastoreOptions OBJECT

Options defining a data set within Google Cloud Datastore

inspectJob.storageConfig.datastoreOptions.partitionId OBJECT

Datastore partition ID. A partition ID identifies a grouping of entities. The grouping is always by project and namespace, however the namespace ID may be empty.

A partition ID contains several dimensions: project ID and namespace ID

inspectJob.storageConfig.datastoreOptions.kind OBJECT

A representation of a Datastore kind

inspectJob.storageConfig.timespanConfig OBJECT

Configuration of the timespan of the items to include in scanning. Currently only supported when inspecting Google Cloud Storage and BigQuery

inspectJob.storageConfig.timespanConfig.startTime ANY

Exclude files or rows older than this value

inspectJob.storageConfig.timespanConfig.timestampField OBJECT

General identifier of a data field in a storage service

inspectJob.storageConfig.timespanConfig.endTime ANY

Exclude files or rows newer than this value. If set to zero, no upper time limit is applied

inspectJob.storageConfig.timespanConfig.enableAutoPopulationOfTimespanConfig BOOLEAN

When the job is started by a JobTrigger we will automatically figure out a valid start_time to avoid scanning files that have not been modified since the last time the JobTrigger executed. This will be based on the time of the execution of the last run of the JobTrigger

inspectJob.storageConfig.bigQueryOptions OBJECT

Options defining BigQuery table and row identifiers

inspectJob.storageConfig.bigQueryOptions.tableReference OBJECT

Message defining the location of a BigQuery table. A table is uniquely identified by its project_id, dataset_id, and table_name. Within a query a table is often referenced with a string in the format of: <project_id>:<dataset_id>.<table_id> or <project_id>.<dataset_id>.<table_id>

inspectJob.storageConfig.bigQueryOptions.sampleMethod ENUMERATION

inspectJob.storageConfig.bigQueryOptions.rowsLimit INTEGER

Max number of rows to scan. If the table has more rows than this value, the rest of the rows are omitted. If not set, or if set to 0, all rows will be scanned. Only one of rows_limit and rows_limit_percent can be specified. Cannot be used in conjunction with TimespanConfig

inspectJob.storageConfig.bigQueryOptions.rowsLimitPercent INTEGER

Max percentage of rows to scan. The rest are omitted. The number of rows scanned is rounded down. Must be between 0 and 100, inclusively. Both 0 and 100 means no limit. Defaults to 0. Only one of rows_limit and rows_limit_percent can be specified. Cannot be used in conjunction with TimespanConfig

inspectJob.storageConfig.cloudStorageOptions OBJECT

Options defining a file or a set of files within a Google Cloud Storage bucket

inspectJob.storageConfig.cloudStorageOptions.bytesLimitPerFile INTEGER

Max number of bytes to scan from a file. If a scanned file's size is bigger than this value then the rest of the bytes are omitted. Only one of bytes_limit_per_file and bytes_limit_per_file_percent can be specified

inspectJob.storageConfig.cloudStorageOptions.filesLimitPercent INTEGER

Limits the number of files to scan to this percentage of the input FileSet. Number of files scanned is rounded down. Must be between 0 and 100, inclusively. Both 0 and 100 means no limit. Defaults to 0

inspectJob.storageConfig.cloudStorageOptions.fileSet OBJECT

Set of files to scan

inspectJob.storageConfig.cloudStorageOptions.sampleMethod ENUMERATION

inspectJob.storageConfig.cloudStorageOptions.bytesLimitPerFilePercent INTEGER

Max percentage of bytes to scan from a file. The rest are omitted. The number of bytes scanned is rounded down. Must be between 0 and 100, inclusively. Both 0 and 100 means no limit. Defaults to 0. Only one of bytes_limit_per_file and bytes_limit_per_file_percent can be specified

inspectJob.storageConfig.cloudStorageOptions.fileTypes[] ENUMERATION

inspectJob.actions[] OBJECT

A task to execute on the completion of a job. See https://cloud.google.com/dlp/docs/concepts-actions to learn more

inspectJob.actions[].jobNotificationEmails OBJECT

Enable email notification to project owners and editors on jobs's completion/failure

inspectJob.actions[].saveFindings OBJECT

If set, the detailed findings will be persisted to the specified OutputStorageConfig. Only a single instance of this action can be specified. Compatible with: Inspect, Risk

inspectJob.actions[].pubSub OBJECT

Publish a message into given Pub/Sub topic when DlpJob has completed. The message contains a single field, DlpJobName, which is equal to the finished job's DlpJob.name. Compatible with: Inspect, Risk

inspectJob.actions[].pubSub.topic STRING

Cloud Pub/Sub topic to send notifications to. The topic must have given publishing access rights to the DLP API service account executing the long running DlpJob sending the notifications. Format is projects/{project}/topics/{topic}

inspectJob.actions[].publishSummaryToCscc OBJECT

Publish the result summary of a DlpJob to the Cloud Security Command Center (CSCC Alpha). This action is only available for projects which are parts of an organization and whitelisted for the alpha Cloud Security Command Center. The action will publish count of finding instances and their info types. The summary of findings will be persisted in CSCC and are governed by CSCC service-specific policy, see https://cloud.google.com/terms/service-terms Only a single instance of this action can be specified. Compatible with: Inspect

jobId STRING

The job id can contain uppercase and lowercase letters, numbers, and hyphens; that is, it must match the regular expression: [a-zA-Z\\d-_]+. The maximum length is 100 characters. Can be empty to allow the system to generate one

riskJob OBJECT

Configuration for a risk analysis job. See https://cloud.google.com/dlp/docs/concepts-risk-analysis to learn more

riskJob.sourceTable OBJECT

Message defining the location of a BigQuery table. A table is uniquely identified by its project_id, dataset_id, and table_name. Within a query a table is often referenced with a string in the format of: <project_id>:<dataset_id>.<table_id> or <project_id>.<dataset_id>.<table_id>

riskJob.sourceTable.datasetId STRING

Dataset ID of the table

riskJob.sourceTable.tableId STRING

Name of the table

riskJob.sourceTable.projectId STRING

The Google Cloud Platform project ID of the project containing the table. If omitted, project ID is inferred from the API call

riskJob.privacyMetric OBJECT

Privacy metric to compute for reidentification risk analysis

riskJob.privacyMetric.numericalStatsConfig OBJECT

Compute numerical stats over an individual column, including min, max, and quantiles

riskJob.privacyMetric.numericalStatsConfig.field OBJECT

General identifier of a data field in a storage service

riskJob.privacyMetric.kAnonymityConfig OBJECT

k-anonymity metric, used for analysis of reidentification risk

riskJob.privacyMetric.kAnonymityConfig.entityId OBJECT

An entity in a dataset is a field or set of fields that correspond to a single person. For example, in medical records the EntityId might be a patient identifier, or for financial records it might be an account identifier. This message is used when generalizations or analysis must take into account that multiple rows correspond to the same entity

riskJob.privacyMetric.categoricalStatsConfig OBJECT

Compute numerical stats over an individual column, including number of distinct values and value count distribution

riskJob.privacyMetric.categoricalStatsConfig.field OBJECT

General identifier of a data field in a storage service

riskJob.privacyMetric.kMapEstimationConfig OBJECT

Reidentifiability metric. This corresponds to a risk model similar to what is called "journalist risk" in the literature, except the attack dataset is statistically modeled instead of being perfectly known. This can be done using publicly available data (like the US Census), or using a custom statistical model (indicated as one or several BigQuery tables), or by extrapolating from the distribution of values in the input dataset. A column with a semantic tag attached

riskJob.privacyMetric.kMapEstimationConfig.regionCode STRING

ISO 3166-1 alpha-2 region code to use in the statistical modeling. Required if no column is tagged with a region-specific InfoType (like US_ZIP_5) or a region code

riskJob.privacyMetric.lDiversityConfig OBJECT

l-diversity metric, used for analysis of reidentification risk

riskJob.privacyMetric.lDiversityConfig.sensitiveAttribute OBJECT

General identifier of a data field in a storage service

riskJob.privacyMetric.deltaPresenceEstimationConfig OBJECT

δ-presence metric, used to estimate how likely it is for an attacker to figure out that one given individual appears in a de-identified dataset. Similarly to the k-map metric, we cannot compute δ-presence exactly without knowing the attack dataset, so we use a statistical model instead

riskJob.privacyMetric.deltaPresenceEstimationConfig.regionCode STRING

ISO 3166-1 alpha-2 region code to use in the statistical modeling. Required if no column is tagged with a region-specific InfoType (like US_ZIP_5) or a region code

riskJob.actions[] OBJECT

A task to execute on the completion of a job. See https://cloud.google.com/dlp/docs/concepts-actions to learn more

riskJob.actions[].jobNotificationEmails OBJECT

Enable email notification to project owners and editors on jobs's completion/failure

riskJob.actions[].saveFindings OBJECT

If set, the detailed findings will be persisted to the specified OutputStorageConfig. Only a single instance of this action can be specified. Compatible with: Inspect, Risk

riskJob.actions[].pubSub OBJECT

Publish a message into given Pub/Sub topic when DlpJob has completed. The message contains a single field, DlpJobName, which is equal to the finished job's DlpJob.name. Compatible with: Inspect, Risk

riskJob.actions[].pubSub.topic STRING

Cloud Pub/Sub topic to send notifications to. The topic must have given publishing access rights to the DLP API service account executing the long running DlpJob sending the notifications. Format is projects/{project}/topics/{topic}

riskJob.actions[].publishSummaryToCscc OBJECT

Publish the result summary of a DlpJob to the Cloud Security Command Center (CSCC Alpha). This action is only available for projects which are parts of an organization and whitelisted for the alpha Cloud Security Command Center. The action will publish count of finding instances and their info types. The summary of findings will be persisted in CSCC and are governed by CSCC service-specific policy, see https://cloud.google.com/terms/service-terms Only a single instance of this action can be specified. Compatible with: Inspect

Output

This building block provides 106 output parameters

  = Parameter name
  = Format

jobTriggerName STRING

If created by a job trigger, the resource name of the trigger that instantiated the job

createTime ANY

Time when the job was created

state ENUMERATION

State of a job

riskDetails OBJECT

Result of a risk analysis operation request

riskDetails.kMapEstimationResult OBJECT

Result of the reidentifiability analysis. Note that these results are an estimation, not exact values

riskDetails.kMapEstimationResult.kMapEstimationHistogram[] OBJECT

A KMapEstimationHistogramBucket message with the following values: min_anonymity: 3 max_anonymity: 5 frequency: 42 means that there are 42 records whose quasi-identifier values correspond to 3, 4 or 5 people in the overlying population. An important particular case is when min_anonymity = max_anonymity = 1: the frequency field then corresponds to the number of uniquely identifiable records

riskDetails.kMapEstimationResult.kMapEstimationHistogram[].minAnonymity INTEGER

Always positive

riskDetails.kMapEstimationResult.kMapEstimationHistogram[].maxAnonymity INTEGER

Always greater than or equal to min_anonymity

riskDetails.kMapEstimationResult.kMapEstimationHistogram[].bucketSize INTEGER

Number of records within these anonymity bounds

riskDetails.kMapEstimationResult.kMapEstimationHistogram[].bucketValueCount INTEGER

Total number of distinct quasi-identifier tuple values in this bucket

riskDetails.deltaPresenceEstimationResult OBJECT

Result of the δ-presence computation. Note that these results are an estimation, not exact values

riskDetails.deltaPresenceEstimationResult.deltaPresenceEstimationHistogram[] OBJECT

A DeltaPresenceEstimationHistogramBucket message with the following values: min_probability: 0.1 max_probability: 0.2 frequency: 42 means that there are 42 records for which δ is in [0.1, 0.2). An important particular case is when min_probability = max_probability = 1: then, every individual who shares this quasi-identifier combination is in the dataset

riskDetails.deltaPresenceEstimationResult.deltaPresenceEstimationHistogram[].maxProbability NUMBER

Always greater than or equal to min_probability

riskDetails.deltaPresenceEstimationResult.deltaPresenceEstimationHistogram[].minProbability NUMBER

Between 0 and 1

riskDetails.deltaPresenceEstimationResult.deltaPresenceEstimationHistogram[].bucketSize INTEGER

Number of records within these probability bounds

riskDetails.deltaPresenceEstimationResult.deltaPresenceEstimationHistogram[].bucketValueCount INTEGER

Total number of distinct quasi-identifier tuple values in this bucket

riskDetails.lDiversityResult OBJECT

Result of the l-diversity computation

riskDetails.lDiversityResult.sensitiveValueFrequencyHistogramBuckets[] OBJECT

riskDetails.lDiversityResult.sensitiveValueFrequencyHistogramBuckets[].sensitiveValueFrequencyUpperBound INTEGER

Upper bound on the sensitive value frequencies of the equivalence classes in this bucket

riskDetails.lDiversityResult.sensitiveValueFrequencyHistogramBuckets[].sensitiveValueFrequencyLowerBound INTEGER

Lower bound on the sensitive value frequencies of the equivalence classes in this bucket

riskDetails.lDiversityResult.sensitiveValueFrequencyHistogramBuckets[].bucketSize INTEGER

Total number of equivalence classes in this bucket

riskDetails.lDiversityResult.sensitiveValueFrequencyHistogramBuckets[].bucketValueCount INTEGER

Total number of distinct equivalence classes in this bucket

riskDetails.requestedSourceTable OBJECT

Message defining the location of a BigQuery table. A table is uniquely identified by its project_id, dataset_id, and table_name. Within a query a table is often referenced with a string in the format of: <project_id>:<dataset_id>.<table_id> or <project_id>.<dataset_id>.<table_id>

riskDetails.requestedSourceTable.datasetId STRING

Dataset ID of the table

riskDetails.requestedSourceTable.tableId STRING

Name of the table

riskDetails.requestedSourceTable.projectId STRING

The Google Cloud Platform project ID of the project containing the table. If omitted, project ID is inferred from the API call

riskDetails.categoricalStatsResult OBJECT

Result of the categorical stats computation

riskDetails.categoricalStatsResult.valueFrequencyHistogramBuckets[] OBJECT

riskDetails.categoricalStatsResult.valueFrequencyHistogramBuckets[].bucketSize INTEGER

Total number of values in this bucket

riskDetails.categoricalStatsResult.valueFrequencyHistogramBuckets[].bucketValueCount INTEGER

Total number of distinct values in this bucket

riskDetails.categoricalStatsResult.valueFrequencyHistogramBuckets[].valueFrequencyUpperBound INTEGER

Upper bound on the value frequency of the values in this bucket

riskDetails.categoricalStatsResult.valueFrequencyHistogramBuckets[].valueFrequencyLowerBound INTEGER

Lower bound on the value frequency of the values in this bucket

riskDetails.requestedPrivacyMetric OBJECT

Privacy metric to compute for reidentification risk analysis

riskDetails.requestedPrivacyMetric.numericalStatsConfig OBJECT

Compute numerical stats over an individual column, including min, max, and quantiles

riskDetails.requestedPrivacyMetric.numericalStatsConfig.field OBJECT

General identifier of a data field in a storage service

riskDetails.requestedPrivacyMetric.kAnonymityConfig OBJECT

k-anonymity metric, used for analysis of reidentification risk

riskDetails.requestedPrivacyMetric.kAnonymityConfig.entityId OBJECT

An entity in a dataset is a field or set of fields that correspond to a single person. For example, in medical records the EntityId might be a patient identifier, or for financial records it might be an account identifier. This message is used when generalizations or analysis must take into account that multiple rows correspond to the same entity

riskDetails.requestedPrivacyMetric.categoricalStatsConfig OBJECT

Compute numerical stats over an individual column, including number of distinct values and value count distribution

riskDetails.requestedPrivacyMetric.categoricalStatsConfig.field OBJECT

General identifier of a data field in a storage service

riskDetails.requestedPrivacyMetric.kMapEstimationConfig OBJECT

Reidentifiability metric. This corresponds to a risk model similar to what is called "journalist risk" in the literature, except the attack dataset is statistically modeled instead of being perfectly known. This can be done using publicly available data (like the US Census), or using a custom statistical model (indicated as one or several BigQuery tables), or by extrapolating from the distribution of values in the input dataset. A column with a semantic tag attached

riskDetails.requestedPrivacyMetric.kMapEstimationConfig.regionCode STRING

ISO 3166-1 alpha-2 region code to use in the statistical modeling. Required if no column is tagged with a region-specific InfoType (like US_ZIP_5) or a region code

riskDetails.requestedPrivacyMetric.lDiversityConfig OBJECT

l-diversity metric, used for analysis of reidentification risk

riskDetails.requestedPrivacyMetric.lDiversityConfig.sensitiveAttribute OBJECT

General identifier of a data field in a storage service

riskDetails.requestedPrivacyMetric.deltaPresenceEstimationConfig OBJECT

δ-presence metric, used to estimate how likely it is for an attacker to figure out that one given individual appears in a de-identified dataset. Similarly to the k-map metric, we cannot compute δ-presence exactly without knowing the attack dataset, so we use a statistical model instead

riskDetails.requestedPrivacyMetric.deltaPresenceEstimationConfig.regionCode STRING

ISO 3166-1 alpha-2 region code to use in the statistical modeling. Required if no column is tagged with a region-specific InfoType (like US_ZIP_5) or a region code

riskDetails.numericalStatsResult OBJECT

Result of the numerical stats computation

riskDetails.numericalStatsResult.minValue OBJECT

Set of primitive values supported by the system. Note that for the purposes of inspection or transformation, the number of bytes considered to comprise a 'Value' is based on its representation as a UTF-8 encoded string. For example, if 'integer_value' is set to 123456789, the number of bytes would be counted as 9, even though an int64 only holds up to 8 bytes of data

riskDetails.numericalStatsResult.minValue.booleanValue BOOLEAN

riskDetails.numericalStatsResult.minValue.floatValue NUMBER

riskDetails.numericalStatsResult.minValue.integerValue INTEGER

riskDetails.numericalStatsResult.minValue.timeValue OBJECT

Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and google.protobuf.Timestamp

riskDetails.numericalStatsResult.minValue.stringValue STRING

riskDetails.numericalStatsResult.minValue.dateValue OBJECT

Represents a whole or partial calendar date, e.g. a birthday. The time of day and time zone are either specified elsewhere or are not significant. The date is relative to the Proleptic Gregorian Calendar. This can represent:

  • A full date, with non-zero year, month and day values
  • A month and day value, with a zero year, e.g. an anniversary
  • A year on its own, with zero month and day values
  • A year and month value, with a zero day, e.g. a credit card expiration date

Related types are google.type.TimeOfDay and google.protobuf.Timestamp

riskDetails.numericalStatsResult.minValue.dayOfWeekValue ENUMERATION

riskDetails.numericalStatsResult.minValue.timestampValue ANY

riskDetails.numericalStatsResult.maxValue OBJECT

Set of primitive values supported by the system. Note that for the purposes of inspection or transformation, the number of bytes considered to comprise a 'Value' is based on its representation as a UTF-8 encoded string. For example, if 'integer_value' is set to 123456789, the number of bytes would be counted as 9, even though an int64 only holds up to 8 bytes of data

riskDetails.numericalStatsResult.maxValue.booleanValue BOOLEAN

riskDetails.numericalStatsResult.maxValue.floatValue NUMBER

riskDetails.numericalStatsResult.maxValue.integerValue INTEGER

riskDetails.numericalStatsResult.maxValue.timeValue OBJECT

Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and google.protobuf.Timestamp

riskDetails.numericalStatsResult.maxValue.stringValue STRING

riskDetails.numericalStatsResult.maxValue.dateValue OBJECT

Represents a whole or partial calendar date, e.g. a birthday. The time of day and time zone are either specified elsewhere or are not significant. The date is relative to the Proleptic Gregorian Calendar. This can represent:

  • A full date, with non-zero year, month and day values
  • A month and day value, with a zero year, e.g. an anniversary
  • A year on its own, with zero month and day values
  • A year and month value, with a zero day, e.g. a credit card expiration date

Related types are google.type.TimeOfDay and google.protobuf.Timestamp

riskDetails.numericalStatsResult.maxValue.dayOfWeekValue ENUMERATION

riskDetails.numericalStatsResult.maxValue.timestampValue ANY

riskDetails.numericalStatsResult.quantileValues[] OBJECT

Set of primitive values supported by the system. Note that for the purposes of inspection or transformation, the number of bytes considered to comprise a 'Value' is based on its representation as a UTF-8 encoded string. For example, if 'integer_value' is set to 123456789, the number of bytes would be counted as 9, even though an int64 only holds up to 8 bytes of data

riskDetails.numericalStatsResult.quantileValues[].booleanValue BOOLEAN

riskDetails.numericalStatsResult.quantileValues[].floatValue NUMBER

riskDetails.numericalStatsResult.quantileValues[].integerValue INTEGER

riskDetails.numericalStatsResult.quantileValues[].stringValue STRING

riskDetails.numericalStatsResult.quantileValues[].dayOfWeekValue ENUMERATION

riskDetails.numericalStatsResult.quantileValues[].timestampValue ANY

riskDetails.kAnonymityResult OBJECT

Result of the k-anonymity computation

riskDetails.kAnonymityResult.equivalenceClassHistogramBuckets[] OBJECT

riskDetails.kAnonymityResult.equivalenceClassHistogramBuckets[].equivalenceClassSizeLowerBound INTEGER

Lower bound on the size of the equivalence classes in this bucket

riskDetails.kAnonymityResult.equivalenceClassHistogramBuckets[].equivalenceClassSizeUpperBound INTEGER

Upper bound on the size of the equivalence classes in this bucket

riskDetails.kAnonymityResult.equivalenceClassHistogramBuckets[].bucketSize INTEGER

Total number of equivalence classes in this bucket

riskDetails.kAnonymityResult.equivalenceClassHistogramBuckets[].bucketValueCount INTEGER

Total number of distinct equivalence classes in this bucket

name STRING

The server-assigned name

type ENUMERATION

The type of job

endTime ANY

Time when the job finished

errors[] OBJECT

Details information about an error encountered during job execution or the results of an unsuccessful activation of the JobTrigger. Output only field

errors[].timestamps[] ANY

errors[].details OBJECT

The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details.

You can find out more about this error model and how to work with it in the API Design Guide

errors[].details.details[] OBJECT

errors[].details.details[].customKey.value ANY

errors[].details.code INTEGER

The status code, which should be an enum value of google.rpc.Code

errors[].details.message STRING

A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client

startTime ANY

Time when the job started

inspectDetails OBJECT

The results of an inspect DataSource job

inspectDetails.result OBJECT

All result fields mentioned below are updated while the job is processing

inspectDetails.result.totalEstimatedBytes INTEGER

Estimate of the number of bytes to process

inspectDetails.result.infoTypeStats[] OBJECT

Statistics regarding a specific InfoType

inspectDetails.result.infoTypeStats[].count INTEGER

Number of findings for this infoType

inspectDetails.result.processedBytes INTEGER

Total size in bytes that were processed

inspectDetails.requestedOptions OBJECT

inspectDetails.requestedOptions.snapshotInspectTemplate OBJECT

The inspectTemplate contains a configuration (set of types of sensitive data to be detected) to be used anywhere you otherwise would normally specify InspectConfig. See https://cloud.google.com/dlp/docs/concepts-templates to learn more

inspectDetails.requestedOptions.snapshotInspectTemplate.createTime ANY

The creation timestamp of a inspectTemplate, output only field

inspectDetails.requestedOptions.snapshotInspectTemplate.updateTime ANY

The last update timestamp of a inspectTemplate, output only field

inspectDetails.requestedOptions.snapshotInspectTemplate.name STRING

The template name. Output only.

The template will have one of the following formats: projects/PROJECT_ID/inspectTemplates/TEMPLATE_ID OR organizations/ORGANIZATION_ID/inspectTemplates/TEMPLATE_ID

inspectDetails.requestedOptions.snapshotInspectTemplate.inspectConfig OBJECT

Configuration description of the scanning process. When used with redactContent only info_types and min_likelihood are currently used

inspectDetails.requestedOptions.snapshotInspectTemplate.displayName STRING

Display name (max 256 chars)

inspectDetails.requestedOptions.snapshotInspectTemplate.description STRING

Short description (max 256 chars)

inspectDetails.requestedOptions.jobConfig OBJECT

inspectDetails.requestedOptions.jobConfig.inspectConfig OBJECT

Configuration description of the scanning process. When used with redactContent only info_types and min_likelihood are currently used

inspectDetails.requestedOptions.jobConfig.inspectTemplateName STRING

If provided, will be used as the default for all values in InspectConfig. inspect_config will be merged into the values persisted as part of the template

inspectDetails.requestedOptions.jobConfig.storageConfig OBJECT

Shared message indicating Cloud storage type