@@ -673,6 +673,20 @@ message ExcludeInfoTypes {
673
673
repeated InfoType info_types = 1 ;
674
674
}
675
675
676
+ // The rule to exclude findings based on a hotword. For record inspection of
677
+ // tables, column names are considered hotwords. An example of this is to
678
+ // exclude a finding if a BigQuery column matches a specific pattern.
679
+ message ExcludeByHotword {
680
+ // Regular expression pattern defining what qualifies as a hotword.
681
+ CustomInfoType.Regex hotword_regex = 1 ;
682
+
683
+ // Range of characters within which the entire hotword must reside.
684
+ // The total length of the window cannot exceed 1000 characters.
685
+ // The windowBefore property in proximity should be set to 1 if the hotword
686
+ // needs to be included in a column header.
687
+ CustomInfoType.DetectionRule.Proximity proximity = 2 ;
688
+ }
689
+
676
690
// The rule that specifies conditions when findings of infoTypes specified in
677
691
// `InspectionRuleSet` are removed from results.
678
692
message ExclusionRule {
@@ -686,6 +700,10 @@ message ExclusionRule {
686
700
687
701
// Set of infoTypes for which findings would affect this rule.
688
702
ExcludeInfoTypes exclude_info_types = 3 ;
703
+
704
+ // Drop if the hotword rule is contained in the proximate context. For
705
+ // tabular data, the context includes the column name.
706
+ ExcludeByHotword exclude_by_hotword = 5 ;
689
707
}
690
708
691
709
// How the rule is applied, see MatchingType documentation for details.
@@ -862,7 +880,6 @@ message ByteContentItem {
862
880
bytes data = 2 ;
863
881
}
864
882
865
- // Container structure for the content to inspect.
866
883
message ContentItem {
867
884
// Data of the item either in the byte array or UTF-8 string form, or table.
868
885
oneof data_item {
@@ -1289,6 +1306,13 @@ message DeidentifyContentRequest {
1289
1306
InspectConfig inspect_config = 3 ;
1290
1307
1291
1308
// The item to de-identify. Will be treated as text.
1309
+ //
1310
+ // This value must be of type
1311
+ // [Table][google.privacy.dlp.v2.Table] if your
1312
+ // [deidentify_config][google.privacy.dlp.v2.DeidentifyContentRequest.deidentify_config]
1313
+ // is a
1314
+ // [RecordTransformations][google.privacy.dlp.v2.RecordTransformations]
1315
+ // object.
1292
1316
ContentItem item = 4 ;
1293
1317
1294
1318
// Template to use. Any configuration directly specified in
@@ -1705,6 +1729,9 @@ message InfoTypeCategory {
1705
1729
1706
1730
// The infoType is typically used in Google internally.
1707
1731
INTERNAL = 40 ;
1732
+
1733
+ // The infoType is typically used in New Zealand.
1734
+ NEW_ZEALAND = 41 ;
1708
1735
}
1709
1736
1710
1737
// Enum of the current industries in the category.
@@ -3716,8 +3743,9 @@ message Action {
3716
3743
// Create a de-identified copy of the input data.
3717
3744
Deidentify deidentify = 7 ;
3718
3745
3719
- // Enable email notification for project owners and editors on job's
3720
- // completion/failure.
3746
+ // Sends an email when the job completes. The email goes to IAM project
3747
+ // owners and technical [Essential
3748
+ // Contacts](https://cloud.google.com/resource-manager/docs/managing-notification-contacts).
3721
3749
JobNotificationEmails job_notification_emails = 8 ;
3722
3750
3723
3751
// Enable Stackdriver metric dlp.googleapis.com/finding_count.
@@ -5249,6 +5277,7 @@ message TableDataProfile {
5249
5277
int64 table_size_bytes = 12 ;
5250
5278
5251
5279
// Number of rows in the table when the profile was generated.
5280
+ // This will not be populated for BigLake tables.
5252
5281
int64 row_count = 13 ;
5253
5282
5254
5283
// How the table is encrypted.
0 commit comments