Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. dataloss
  5. PreventionDiscoveryConfig
Google Cloud v8.26.0 published on Thursday, Apr 10, 2025 by Pulumi
pulumi/pulumi-gcp

gcp.dataloss.PreventionDiscoveryConfig

Explore with Pulumi AI

Google Cloud v8.26.0 published on Thursday, Apr 10, 2025 by Pulumi
pulumi/pulumi-gcp

Configuration for discovery to scan resources for profile generation. Only one discovery configuration may exist per organization, folder, or project.

To get more information about DiscoveryConfig, see:

Example Usage

Create PreventionDiscoveryConfig Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PreventionDiscoveryConfig(name: string, args: PreventionDiscoveryConfigArgs, opts?: CustomResourceOptions);
@overload
def PreventionDiscoveryConfig(resource_name: str,
                              args: PreventionDiscoveryConfigArgs,
                              opts: Optional[ResourceOptions] = None)

@overload
def PreventionDiscoveryConfig(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              location: Optional[str] = None,
                              parent: Optional[str] = None,
                              actions: Optional[Sequence[PreventionDiscoveryConfigActionArgs]] = None,
                              display_name: Optional[str] = None,
                              inspect_templates: Optional[Sequence[str]] = None,
                              org_config: Optional[PreventionDiscoveryConfigOrgConfigArgs] = None,
                              status: Optional[str] = None,
                              targets: Optional[Sequence[PreventionDiscoveryConfigTargetArgs]] = None)
func NewPreventionDiscoveryConfig(ctx *Context, name string, args PreventionDiscoveryConfigArgs, opts ...ResourceOption) (*PreventionDiscoveryConfig, error)
public PreventionDiscoveryConfig(string name, PreventionDiscoveryConfigArgs args, CustomResourceOptions? opts = null)
public PreventionDiscoveryConfig(String name, PreventionDiscoveryConfigArgs args)
public PreventionDiscoveryConfig(String name, PreventionDiscoveryConfigArgs args, CustomResourceOptions options)

type: gcp:dataloss:PreventionDiscoveryConfig
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. PreventionDiscoveryConfigArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. PreventionDiscoveryConfigArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. PreventionDiscoveryConfigArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. PreventionDiscoveryConfigArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. PreventionDiscoveryConfigArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var preventionDiscoveryConfigResource = new Gcp.DataLoss.PreventionDiscoveryConfig("preventionDiscoveryConfigResource", new()
{
    Location = "string",
    Parent = "string",
    Actions = new[]
    {
        new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionArgs
        {
            ExportData = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionExportDataArgs
            {
                ProfileTable = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionExportDataProfileTableArgs
                {
                    DatasetId = "string",
                    ProjectId = "string",
                    TableId = "string",
                },
            },
            PubSubNotification = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionPubSubNotificationArgs
            {
                DetailOfMessage = "string",
                Event = "string",
                PubsubCondition = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionArgs
                {
                    Expressions = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsArgs
                    {
                        Conditions = new[]
                        {
                            new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsConditionArgs
                            {
                                MinimumRiskScore = "string",
                                MinimumSensitivityScore = "string",
                            },
                        },
                        LogicalOperator = "string",
                    },
                },
                Topic = "string",
            },
            TagResources = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionTagResourcesArgs
            {
                LowerDataRiskToLow = false,
                ProfileGenerationsToTags = new[]
                {
                    "string",
                },
                TagConditions = new[]
                {
                    new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionTagResourcesTagConditionArgs
                    {
                        SensitivityScore = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScoreArgs
                        {
                            Score = "string",
                        },
                        Tag = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigActionTagResourcesTagConditionTagArgs
                        {
                            NamespacedValue = "string",
                        },
                    },
                },
            },
        },
    },
    DisplayName = "string",
    InspectTemplates = new[]
    {
        "string",
    },
    OrgConfig = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigOrgConfigArgs
    {
        Location = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigOrgConfigLocationArgs
        {
            FolderId = "string",
            OrganizationId = "string",
        },
        ProjectId = "string",
    },
    Status = "string",
    Targets = new[]
    {
        new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetArgs
        {
            BigQueryTarget = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetArgs
            {
                Cadence = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetCadenceArgs
                {
                    InspectTemplateModifiedCadence = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadenceArgs
                    {
                        Frequency = "string",
                    },
                    SchemaModifiedCadence = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadenceArgs
                    {
                        Frequency = "string",
                        Types = new[]
                        {
                            "string",
                        },
                    },
                    TableModifiedCadence = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadenceArgs
                    {
                        Frequency = "string",
                        Types = new[]
                        {
                            "string",
                        },
                    },
                },
                Conditions = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetConditionsArgs
                {
                    CreatedAfter = "string",
                    OrConditions = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetConditionsOrConditionsArgs
                    {
                        MinAge = "string",
                        MinRowCount = 0,
                    },
                    TypeCollection = "string",
                    Types = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetConditionsTypesArgs
                    {
                        Types = new[]
                        {
                            "string",
                        },
                    },
                },
                Disabled = null,
                Filter = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetFilterArgs
                {
                    OtherTables = null,
                    TableReference = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetFilterTableReferenceArgs
                    {
                        DatasetId = "string",
                        TableId = "string",
                    },
                    Tables = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesArgs
                    {
                        IncludeRegexes = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesArgs
                        {
                            Patterns = new[]
                            {
                                new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPatternArgs
                                {
                                    DatasetIdRegex = "string",
                                    ProjectIdRegex = "string",
                                    TableIdRegex = "string",
                                },
                            },
                        },
                    },
                },
            },
            CloudSqlTarget = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudSqlTargetArgs
            {
                Filter = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudSqlTargetFilterArgs
                {
                    Collection = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionArgs
                    {
                        IncludeRegexes = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesArgs
                        {
                            Patterns = new[]
                            {
                                new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPatternArgs
                                {
                                    DatabaseRegex = "string",
                                    DatabaseResourceNameRegex = "string",
                                    InstanceRegex = "string",
                                    ProjectIdRegex = "string",
                                },
                            },
                        },
                    },
                    DatabaseResourceReference = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReferenceArgs
                    {
                        Database = "string",
                        DatabaseResource = "string",
                        Instance = "string",
                        ProjectId = "string",
                    },
                    Others = null,
                },
                Conditions = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudSqlTargetConditionsArgs
                {
                    DatabaseEngines = new[]
                    {
                        "string",
                    },
                    Types = new[]
                    {
                        "string",
                    },
                },
                Disabled = null,
                GenerationCadence = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceArgs
                {
                    InspectTemplateModifiedCadence = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadenceArgs
                    {
                        Frequency = "string",
                    },
                    RefreshFrequency = "string",
                    SchemaModifiedCadence = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadenceArgs
                    {
                        Frequency = "string",
                        Types = new[]
                        {
                            "string",
                        },
                    },
                },
            },
            CloudStorageTarget = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetArgs
            {
                Filter = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetFilterArgs
                {
                    CloudStorageResourceReference = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCloudStorageResourceReferenceArgs
                    {
                        BucketName = "string",
                        ProjectId = "string",
                    },
                    Collection = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionArgs
                    {
                        IncludeRegexes = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesArgs
                        {
                            Patterns = new[]
                            {
                                new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPatternArgs
                                {
                                    CloudStorageRegex = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPatternCloudStorageRegexArgs
                                    {
                                        BucketNameRegex = "string",
                                        ProjectIdRegex = "string",
                                    },
                                },
                            },
                        },
                    },
                    Others = null,
                },
                Conditions = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetConditionsArgs
                {
                    CloudStorageConditions = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetConditionsCloudStorageConditionsArgs
                    {
                        IncludedBucketAttributes = new[]
                        {
                            "string",
                        },
                        IncludedObjectAttributes = new[]
                        {
                            "string",
                        },
                    },
                    CreatedAfter = "string",
                    MinAge = "string",
                },
                Disabled = null,
                GenerationCadence = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceArgs
                {
                    InspectTemplateModifiedCadence = new Gcp.DataLoss.Inputs.PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceInspectTemplateModifiedCadenceArgs
                    {
                        Frequency = "string",
                    },
                    RefreshFrequency = "string",
                },
            },
            SecretsTarget = null,
        },
    },
});
Copy
example, err := dataloss.NewPreventionDiscoveryConfig(ctx, "preventionDiscoveryConfigResource", &dataloss.PreventionDiscoveryConfigArgs{
	Location: pulumi.String("string"),
	Parent:   pulumi.String("string"),
	Actions: dataloss.PreventionDiscoveryConfigActionArray{
		&dataloss.PreventionDiscoveryConfigActionArgs{
			ExportData: &dataloss.PreventionDiscoveryConfigActionExportDataArgs{
				ProfileTable: &dataloss.PreventionDiscoveryConfigActionExportDataProfileTableArgs{
					DatasetId: pulumi.String("string"),
					ProjectId: pulumi.String("string"),
					TableId:   pulumi.String("string"),
				},
			},
			PubSubNotification: &dataloss.PreventionDiscoveryConfigActionPubSubNotificationArgs{
				DetailOfMessage: pulumi.String("string"),
				Event:           pulumi.String("string"),
				PubsubCondition: &dataloss.PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionArgs{
					Expressions: &dataloss.PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsArgs{
						Conditions: dataloss.PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsConditionArray{
							&dataloss.PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsConditionArgs{
								MinimumRiskScore:        pulumi.String("string"),
								MinimumSensitivityScore: pulumi.String("string"),
							},
						},
						LogicalOperator: pulumi.String("string"),
					},
				},
				Topic: pulumi.String("string"),
			},
			TagResources: &dataloss.PreventionDiscoveryConfigActionTagResourcesArgs{
				LowerDataRiskToLow: pulumi.Bool(false),
				ProfileGenerationsToTags: pulumi.StringArray{
					pulumi.String("string"),
				},
				TagConditions: dataloss.PreventionDiscoveryConfigActionTagResourcesTagConditionArray{
					&dataloss.PreventionDiscoveryConfigActionTagResourcesTagConditionArgs{
						SensitivityScore: &dataloss.PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScoreArgs{
							Score: pulumi.String("string"),
						},
						Tag: &dataloss.PreventionDiscoveryConfigActionTagResourcesTagConditionTagArgs{
							NamespacedValue: pulumi.String("string"),
						},
					},
				},
			},
		},
	},
	DisplayName: pulumi.String("string"),
	InspectTemplates: pulumi.StringArray{
		pulumi.String("string"),
	},
	OrgConfig: &dataloss.PreventionDiscoveryConfigOrgConfigArgs{
		Location: &dataloss.PreventionDiscoveryConfigOrgConfigLocationArgs{
			FolderId:       pulumi.String("string"),
			OrganizationId: pulumi.String("string"),
		},
		ProjectId: pulumi.String("string"),
	},
	Status: pulumi.String("string"),
	Targets: dataloss.PreventionDiscoveryConfigTargetArray{
		&dataloss.PreventionDiscoveryConfigTargetArgs{
			BigQueryTarget: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetArgs{
				Cadence: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetCadenceArgs{
					InspectTemplateModifiedCadence: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadenceArgs{
						Frequency: pulumi.String("string"),
					},
					SchemaModifiedCadence: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadenceArgs{
						Frequency: pulumi.String("string"),
						Types: pulumi.StringArray{
							pulumi.String("string"),
						},
					},
					TableModifiedCadence: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadenceArgs{
						Frequency: pulumi.String("string"),
						Types: pulumi.StringArray{
							pulumi.String("string"),
						},
					},
				},
				Conditions: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetConditionsArgs{
					CreatedAfter: pulumi.String("string"),
					OrConditions: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetConditionsOrConditionsArgs{
						MinAge:      pulumi.String("string"),
						MinRowCount: pulumi.Int(0),
					},
					TypeCollection: pulumi.String("string"),
					Types: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetConditionsTypesArgs{
						Types: pulumi.StringArray{
							pulumi.String("string"),
						},
					},
				},
				Disabled: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetDisabledArgs{},
				Filter: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetFilterArgs{
					OtherTables: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetFilterOtherTablesArgs{},
					TableReference: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetFilterTableReferenceArgs{
						DatasetId: pulumi.String("string"),
						TableId:   pulumi.String("string"),
					},
					Tables: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesArgs{
						IncludeRegexes: &dataloss.PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesArgs{
							Patterns: dataloss.PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPatternArray{
								&dataloss.PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPatternArgs{
									DatasetIdRegex: pulumi.String("string"),
									ProjectIdRegex: pulumi.String("string"),
									TableIdRegex:   pulumi.String("string"),
								},
							},
						},
					},
				},
			},
			CloudSqlTarget: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetArgs{
				Filter: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetFilterArgs{
					Collection: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionArgs{
						IncludeRegexes: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesArgs{
							Patterns: dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPatternArray{
								&dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPatternArgs{
									DatabaseRegex:             pulumi.String("string"),
									DatabaseResourceNameRegex: pulumi.String("string"),
									InstanceRegex:             pulumi.String("string"),
									ProjectIdRegex:            pulumi.String("string"),
								},
							},
						},
					},
					DatabaseResourceReference: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReferenceArgs{
						Database:         pulumi.String("string"),
						DatabaseResource: pulumi.String("string"),
						Instance:         pulumi.String("string"),
						ProjectId:        pulumi.String("string"),
					},
					Others: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetFilterOthersArgs{},
				},
				Conditions: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetConditionsArgs{
					DatabaseEngines: pulumi.StringArray{
						pulumi.String("string"),
					},
					Types: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
				Disabled: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetDisabledArgs{},
				GenerationCadence: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceArgs{
					InspectTemplateModifiedCadence: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadenceArgs{
						Frequency: pulumi.String("string"),
					},
					RefreshFrequency: pulumi.String("string"),
					SchemaModifiedCadence: &dataloss.PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadenceArgs{
						Frequency: pulumi.String("string"),
						Types: pulumi.StringArray{
							pulumi.String("string"),
						},
					},
				},
			},
			CloudStorageTarget: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetArgs{
				Filter: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetFilterArgs{
					CloudStorageResourceReference: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCloudStorageResourceReferenceArgs{
						BucketName: pulumi.String("string"),
						ProjectId:  pulumi.String("string"),
					},
					Collection: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionArgs{
						IncludeRegexes: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesArgs{
							Patterns: dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPatternArray{
								&dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPatternArgs{
									CloudStorageRegex: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPatternCloudStorageRegexArgs{
										BucketNameRegex: pulumi.String("string"),
										ProjectIdRegex:  pulumi.String("string"),
									},
								},
							},
						},
					},
					Others: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetFilterOthersArgs{},
				},
				Conditions: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetConditionsArgs{
					CloudStorageConditions: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetConditionsCloudStorageConditionsArgs{
						IncludedBucketAttributes: pulumi.StringArray{
							pulumi.String("string"),
						},
						IncludedObjectAttributes: pulumi.StringArray{
							pulumi.String("string"),
						},
					},
					CreatedAfter: pulumi.String("string"),
					MinAge:       pulumi.String("string"),
				},
				Disabled: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetDisabledArgs{},
				GenerationCadence: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceArgs{
					InspectTemplateModifiedCadence: &dataloss.PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceInspectTemplateModifiedCadenceArgs{
						Frequency: pulumi.String("string"),
					},
					RefreshFrequency: pulumi.String("string"),
				},
			},
			SecretsTarget: &dataloss.PreventionDiscoveryConfigTargetSecretsTargetArgs{},
		},
	},
})
Copy
var preventionDiscoveryConfigResource = new PreventionDiscoveryConfig("preventionDiscoveryConfigResource", PreventionDiscoveryConfigArgs.builder()
    .location("string")
    .parent("string")
    .actions(PreventionDiscoveryConfigActionArgs.builder()
        .exportData(PreventionDiscoveryConfigActionExportDataArgs.builder()
            .profileTable(PreventionDiscoveryConfigActionExportDataProfileTableArgs.builder()
                .datasetId("string")
                .projectId("string")
                .tableId("string")
                .build())
            .build())
        .pubSubNotification(PreventionDiscoveryConfigActionPubSubNotificationArgs.builder()
            .detailOfMessage("string")
            .event("string")
            .pubsubCondition(PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionArgs.builder()
                .expressions(PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsArgs.builder()
                    .conditions(PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsConditionArgs.builder()
                        .minimumRiskScore("string")
                        .minimumSensitivityScore("string")
                        .build())
                    .logicalOperator("string")
                    .build())
                .build())
            .topic("string")
            .build())
        .tagResources(PreventionDiscoveryConfigActionTagResourcesArgs.builder()
            .lowerDataRiskToLow(false)
            .profileGenerationsToTags("string")
            .tagConditions(PreventionDiscoveryConfigActionTagResourcesTagConditionArgs.builder()
                .sensitivityScore(PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScoreArgs.builder()
                    .score("string")
                    .build())
                .tag(PreventionDiscoveryConfigActionTagResourcesTagConditionTagArgs.builder()
                    .namespacedValue("string")
                    .build())
                .build())
            .build())
        .build())
    .displayName("string")
    .inspectTemplates("string")
    .orgConfig(PreventionDiscoveryConfigOrgConfigArgs.builder()
        .location(PreventionDiscoveryConfigOrgConfigLocationArgs.builder()
            .folderId("string")
            .organizationId("string")
            .build())
        .projectId("string")
        .build())
    .status("string")
    .targets(PreventionDiscoveryConfigTargetArgs.builder()
        .bigQueryTarget(PreventionDiscoveryConfigTargetBigQueryTargetArgs.builder()
            .cadence(PreventionDiscoveryConfigTargetBigQueryTargetCadenceArgs.builder()
                .inspectTemplateModifiedCadence(PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadenceArgs.builder()
                    .frequency("string")
                    .build())
                .schemaModifiedCadence(PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadenceArgs.builder()
                    .frequency("string")
                    .types("string")
                    .build())
                .tableModifiedCadence(PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadenceArgs.builder()
                    .frequency("string")
                    .types("string")
                    .build())
                .build())
            .conditions(PreventionDiscoveryConfigTargetBigQueryTargetConditionsArgs.builder()
                .createdAfter("string")
                .orConditions(PreventionDiscoveryConfigTargetBigQueryTargetConditionsOrConditionsArgs.builder()
                    .minAge("string")
                    .minRowCount(0)
                    .build())
                .typeCollection("string")
                .types(PreventionDiscoveryConfigTargetBigQueryTargetConditionsTypesArgs.builder()
                    .types("string")
                    .build())
                .build())
            .disabled()
            .filter(PreventionDiscoveryConfigTargetBigQueryTargetFilterArgs.builder()
                .otherTables()
                .tableReference(PreventionDiscoveryConfigTargetBigQueryTargetFilterTableReferenceArgs.builder()
                    .datasetId("string")
                    .tableId("string")
                    .build())
                .tables(PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesArgs.builder()
                    .includeRegexes(PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesArgs.builder()
                        .patterns(PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPatternArgs.builder()
                            .datasetIdRegex("string")
                            .projectIdRegex("string")
                            .tableIdRegex("string")
                            .build())
                        .build())
                    .build())
                .build())
            .build())
        .cloudSqlTarget(PreventionDiscoveryConfigTargetCloudSqlTargetArgs.builder()
            .filter(PreventionDiscoveryConfigTargetCloudSqlTargetFilterArgs.builder()
                .collection(PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionArgs.builder()
                    .includeRegexes(PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesArgs.builder()
                        .patterns(PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPatternArgs.builder()
                            .databaseRegex("string")
                            .databaseResourceNameRegex("string")
                            .instanceRegex("string")
                            .projectIdRegex("string")
                            .build())
                        .build())
                    .build())
                .databaseResourceReference(PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReferenceArgs.builder()
                    .database("string")
                    .databaseResource("string")
                    .instance("string")
                    .projectId("string")
                    .build())
                .others()
                .build())
            .conditions(PreventionDiscoveryConfigTargetCloudSqlTargetConditionsArgs.builder()
                .databaseEngines("string")
                .types("string")
                .build())
            .disabled()
            .generationCadence(PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceArgs.builder()
                .inspectTemplateModifiedCadence(PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadenceArgs.builder()
                    .frequency("string")
                    .build())
                .refreshFrequency("string")
                .schemaModifiedCadence(PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadenceArgs.builder()
                    .frequency("string")
                    .types("string")
                    .build())
                .build())
            .build())
        .cloudStorageTarget(PreventionDiscoveryConfigTargetCloudStorageTargetArgs.builder()
            .filter(PreventionDiscoveryConfigTargetCloudStorageTargetFilterArgs.builder()
                .cloudStorageResourceReference(PreventionDiscoveryConfigTargetCloudStorageTargetFilterCloudStorageResourceReferenceArgs.builder()
                    .bucketName("string")
                    .projectId("string")
                    .build())
                .collection(PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionArgs.builder()
                    .includeRegexes(PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesArgs.builder()
                        .patterns(PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPatternArgs.builder()
                            .cloudStorageRegex(PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPatternCloudStorageRegexArgs.builder()
                                .bucketNameRegex("string")
                                .projectIdRegex("string")
                                .build())
                            .build())
                        .build())
                    .build())
                .others()
                .build())
            .conditions(PreventionDiscoveryConfigTargetCloudStorageTargetConditionsArgs.builder()
                .cloudStorageConditions(PreventionDiscoveryConfigTargetCloudStorageTargetConditionsCloudStorageConditionsArgs.builder()
                    .includedBucketAttributes("string")
                    .includedObjectAttributes("string")
                    .build())
                .createdAfter("string")
                .minAge("string")
                .build())
            .disabled()
            .generationCadence(PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceArgs.builder()
                .inspectTemplateModifiedCadence(PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceInspectTemplateModifiedCadenceArgs.builder()
                    .frequency("string")
                    .build())
                .refreshFrequency("string")
                .build())
            .build())
        .secretsTarget()
        .build())
    .build());
Copy
prevention_discovery_config_resource = gcp.dataloss.PreventionDiscoveryConfig("preventionDiscoveryConfigResource",
    location="string",
    parent="string",
    actions=[{
        "export_data": {
            "profile_table": {
                "dataset_id": "string",
                "project_id": "string",
                "table_id": "string",
            },
        },
        "pub_sub_notification": {
            "detail_of_message": "string",
            "event": "string",
            "pubsub_condition": {
                "expressions": {
                    "conditions": [{
                        "minimum_risk_score": "string",
                        "minimum_sensitivity_score": "string",
                    }],
                    "logical_operator": "string",
                },
            },
            "topic": "string",
        },
        "tag_resources": {
            "lower_data_risk_to_low": False,
            "profile_generations_to_tags": ["string"],
            "tag_conditions": [{
                "sensitivity_score": {
                    "score": "string",
                },
                "tag": {
                    "namespaced_value": "string",
                },
            }],
        },
    }],
    display_name="string",
    inspect_templates=["string"],
    org_config={
        "location": {
            "folder_id": "string",
            "organization_id": "string",
        },
        "project_id": "string",
    },
    status="string",
    targets=[{
        "big_query_target": {
            "cadence": {
                "inspect_template_modified_cadence": {
                    "frequency": "string",
                },
                "schema_modified_cadence": {
                    "frequency": "string",
                    "types": ["string"],
                },
                "table_modified_cadence": {
                    "frequency": "string",
                    "types": ["string"],
                },
            },
            "conditions": {
                "created_after": "string",
                "or_conditions": {
                    "min_age": "string",
                    "min_row_count": 0,
                },
                "type_collection": "string",
                "types": {
                    "types": ["string"],
                },
            },
            "disabled": {},
            "filter": {
                "other_tables": {},
                "table_reference": {
                    "dataset_id": "string",
                    "table_id": "string",
                },
                "tables": {
                    "include_regexes": {
                        "patterns": [{
                            "dataset_id_regex": "string",
                            "project_id_regex": "string",
                            "table_id_regex": "string",
                        }],
                    },
                },
            },
        },
        "cloud_sql_target": {
            "filter": {
                "collection": {
                    "include_regexes": {
                        "patterns": [{
                            "database_regex": "string",
                            "database_resource_name_regex": "string",
                            "instance_regex": "string",
                            "project_id_regex": "string",
                        }],
                    },
                },
                "database_resource_reference": {
                    "database": "string",
                    "database_resource": "string",
                    "instance": "string",
                    "project_id": "string",
                },
                "others": {},
            },
            "conditions": {
                "database_engines": ["string"],
                "types": ["string"],
            },
            "disabled": {},
            "generation_cadence": {
                "inspect_template_modified_cadence": {
                    "frequency": "string",
                },
                "refresh_frequency": "string",
                "schema_modified_cadence": {
                    "frequency": "string",
                    "types": ["string"],
                },
            },
        },
        "cloud_storage_target": {
            "filter": {
                "cloud_storage_resource_reference": {
                    "bucket_name": "string",
                    "project_id": "string",
                },
                "collection": {
                    "include_regexes": {
                        "patterns": [{
                            "cloud_storage_regex": {
                                "bucket_name_regex": "string",
                                "project_id_regex": "string",
                            },
                        }],
                    },
                },
                "others": {},
            },
            "conditions": {
                "cloud_storage_conditions": {
                    "included_bucket_attributes": ["string"],
                    "included_object_attributes": ["string"],
                },
                "created_after": "string",
                "min_age": "string",
            },
            "disabled": {},
            "generation_cadence": {
                "inspect_template_modified_cadence": {
                    "frequency": "string",
                },
                "refresh_frequency": "string",
            },
        },
        "secrets_target": {},
    }])
Copy
const preventionDiscoveryConfigResource = new gcp.dataloss.PreventionDiscoveryConfig("preventionDiscoveryConfigResource", {
    location: "string",
    parent: "string",
    actions: [{
        exportData: {
            profileTable: {
                datasetId: "string",
                projectId: "string",
                tableId: "string",
            },
        },
        pubSubNotification: {
            detailOfMessage: "string",
            event: "string",
            pubsubCondition: {
                expressions: {
                    conditions: [{
                        minimumRiskScore: "string",
                        minimumSensitivityScore: "string",
                    }],
                    logicalOperator: "string",
                },
            },
            topic: "string",
        },
        tagResources: {
            lowerDataRiskToLow: false,
            profileGenerationsToTags: ["string"],
            tagConditions: [{
                sensitivityScore: {
                    score: "string",
                },
                tag: {
                    namespacedValue: "string",
                },
            }],
        },
    }],
    displayName: "string",
    inspectTemplates: ["string"],
    orgConfig: {
        location: {
            folderId: "string",
            organizationId: "string",
        },
        projectId: "string",
    },
    status: "string",
    targets: [{
        bigQueryTarget: {
            cadence: {
                inspectTemplateModifiedCadence: {
                    frequency: "string",
                },
                schemaModifiedCadence: {
                    frequency: "string",
                    types: ["string"],
                },
                tableModifiedCadence: {
                    frequency: "string",
                    types: ["string"],
                },
            },
            conditions: {
                createdAfter: "string",
                orConditions: {
                    minAge: "string",
                    minRowCount: 0,
                },
                typeCollection: "string",
                types: {
                    types: ["string"],
                },
            },
            disabled: {},
            filter: {
                otherTables: {},
                tableReference: {
                    datasetId: "string",
                    tableId: "string",
                },
                tables: {
                    includeRegexes: {
                        patterns: [{
                            datasetIdRegex: "string",
                            projectIdRegex: "string",
                            tableIdRegex: "string",
                        }],
                    },
                },
            },
        },
        cloudSqlTarget: {
            filter: {
                collection: {
                    includeRegexes: {
                        patterns: [{
                            databaseRegex: "string",
                            databaseResourceNameRegex: "string",
                            instanceRegex: "string",
                            projectIdRegex: "string",
                        }],
                    },
                },
                databaseResourceReference: {
                    database: "string",
                    databaseResource: "string",
                    instance: "string",
                    projectId: "string",
                },
                others: {},
            },
            conditions: {
                databaseEngines: ["string"],
                types: ["string"],
            },
            disabled: {},
            generationCadence: {
                inspectTemplateModifiedCadence: {
                    frequency: "string",
                },
                refreshFrequency: "string",
                schemaModifiedCadence: {
                    frequency: "string",
                    types: ["string"],
                },
            },
        },
        cloudStorageTarget: {
            filter: {
                cloudStorageResourceReference: {
                    bucketName: "string",
                    projectId: "string",
                },
                collection: {
                    includeRegexes: {
                        patterns: [{
                            cloudStorageRegex: {
                                bucketNameRegex: "string",
                                projectIdRegex: "string",
                            },
                        }],
                    },
                },
                others: {},
            },
            conditions: {
                cloudStorageConditions: {
                    includedBucketAttributes: ["string"],
                    includedObjectAttributes: ["string"],
                },
                createdAfter: "string",
                minAge: "string",
            },
            disabled: {},
            generationCadence: {
                inspectTemplateModifiedCadence: {
                    frequency: "string",
                },
                refreshFrequency: "string",
            },
        },
        secretsTarget: {},
    }],
});
Copy
type: gcp:dataloss:PreventionDiscoveryConfig
properties:
    actions:
        - exportData:
            profileTable:
                datasetId: string
                projectId: string
                tableId: string
          pubSubNotification:
            detailOfMessage: string
            event: string
            pubsubCondition:
                expressions:
                    conditions:
                        - minimumRiskScore: string
                          minimumSensitivityScore: string
                    logicalOperator: string
            topic: string
          tagResources:
            lowerDataRiskToLow: false
            profileGenerationsToTags:
                - string
            tagConditions:
                - sensitivityScore:
                    score: string
                  tag:
                    namespacedValue: string
    displayName: string
    inspectTemplates:
        - string
    location: string
    orgConfig:
        location:
            folderId: string
            organizationId: string
        projectId: string
    parent: string
    status: string
    targets:
        - bigQueryTarget:
            cadence:
                inspectTemplateModifiedCadence:
                    frequency: string
                schemaModifiedCadence:
                    frequency: string
                    types:
                        - string
                tableModifiedCadence:
                    frequency: string
                    types:
                        - string
            conditions:
                createdAfter: string
                orConditions:
                    minAge: string
                    minRowCount: 0
                typeCollection: string
                types:
                    types:
                        - string
            disabled: {}
            filter:
                otherTables: {}
                tableReference:
                    datasetId: string
                    tableId: string
                tables:
                    includeRegexes:
                        patterns:
                            - datasetIdRegex: string
                              projectIdRegex: string
                              tableIdRegex: string
          cloudSqlTarget:
            conditions:
                databaseEngines:
                    - string
                types:
                    - string
            disabled: {}
            filter:
                collection:
                    includeRegexes:
                        patterns:
                            - databaseRegex: string
                              databaseResourceNameRegex: string
                              instanceRegex: string
                              projectIdRegex: string
                databaseResourceReference:
                    database: string
                    databaseResource: string
                    instance: string
                    projectId: string
                others: {}
            generationCadence:
                inspectTemplateModifiedCadence:
                    frequency: string
                refreshFrequency: string
                schemaModifiedCadence:
                    frequency: string
                    types:
                        - string
          cloudStorageTarget:
            conditions:
                cloudStorageConditions:
                    includedBucketAttributes:
                        - string
                    includedObjectAttributes:
                        - string
                createdAfter: string
                minAge: string
            disabled: {}
            filter:
                cloudStorageResourceReference:
                    bucketName: string
                    projectId: string
                collection:
                    includeRegexes:
                        patterns:
                            - cloudStorageRegex:
                                bucketNameRegex: string
                                projectIdRegex: string
                others: {}
            generationCadence:
                inspectTemplateModifiedCadence:
                    frequency: string
                refreshFrequency: string
          secretsTarget: {}
Copy

PreventionDiscoveryConfig Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PreventionDiscoveryConfig resource accepts the following input properties:

Location
This property is required.
Changes to this property will trigger replacement.
string
Location to create the discovery config in.

Parent
This property is required.
Changes to this property will trigger replacement.
string
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
Actions List<PreventionDiscoveryConfigAction>
Actions to execute at the completion of scanning Structure is documented below.
DisplayName string
Display Name (max 1000 Chars)
InspectTemplates List<string>
Detection logic for profile generation
OrgConfig PreventionDiscoveryConfigOrgConfig
A nested object resource. Structure is documented below.
Status string
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
Targets List<PreventionDiscoveryConfigTarget>
Target to match against for determining what to scan and how frequently Structure is documented below.
Location
This property is required.
Changes to this property will trigger replacement.
string
Location to create the discovery config in.

Parent
This property is required.
Changes to this property will trigger replacement.
string
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
Actions []PreventionDiscoveryConfigActionArgs
Actions to execute at the completion of scanning Structure is documented below.
DisplayName string
Display Name (max 1000 Chars)
InspectTemplates []string
Detection logic for profile generation
OrgConfig PreventionDiscoveryConfigOrgConfigArgs
A nested object resource. Structure is documented below.
Status string
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
Targets []PreventionDiscoveryConfigTargetArgs
Target to match against for determining what to scan and how frequently Structure is documented below.
location
This property is required.
Changes to this property will trigger replacement.
String
Location to create the discovery config in.

parent
This property is required.
Changes to this property will trigger replacement.
String
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
actions List<PreventionDiscoveryConfigAction>
Actions to execute at the completion of scanning Structure is documented below.
displayName String
Display Name (max 1000 Chars)
inspectTemplates List<String>
Detection logic for profile generation
orgConfig PreventionDiscoveryConfigOrgConfig
A nested object resource. Structure is documented below.
status String
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
targets List<PreventionDiscoveryConfigTarget>
Target to match against for determining what to scan and how frequently Structure is documented below.
location
This property is required.
Changes to this property will trigger replacement.
string
Location to create the discovery config in.

parent
This property is required.
Changes to this property will trigger replacement.
string
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
actions PreventionDiscoveryConfigAction[]
Actions to execute at the completion of scanning Structure is documented below.
displayName string
Display Name (max 1000 Chars)
inspectTemplates string[]
Detection logic for profile generation
orgConfig PreventionDiscoveryConfigOrgConfig
A nested object resource. Structure is documented below.
status string
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
targets PreventionDiscoveryConfigTarget[]
Target to match against for determining what to scan and how frequently Structure is documented below.
location
This property is required.
Changes to this property will trigger replacement.
str
Location to create the discovery config in.

parent
This property is required.
Changes to this property will trigger replacement.
str
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
actions Sequence[PreventionDiscoveryConfigActionArgs]
Actions to execute at the completion of scanning Structure is documented below.
display_name str
Display Name (max 1000 Chars)
inspect_templates Sequence[str]
Detection logic for profile generation
org_config PreventionDiscoveryConfigOrgConfigArgs
A nested object resource. Structure is documented below.
status str
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
targets Sequence[PreventionDiscoveryConfigTargetArgs]
Target to match against for determining what to scan and how frequently Structure is documented below.
location
This property is required.
Changes to this property will trigger replacement.
String
Location to create the discovery config in.

parent
This property is required.
Changes to this property will trigger replacement.
String
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
actions List<Property Map>
Actions to execute at the completion of scanning Structure is documented below.
displayName String
Display Name (max 1000 Chars)
inspectTemplates List<String>
Detection logic for profile generation
orgConfig Property Map
A nested object resource. Structure is documented below.
status String
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
targets List<Property Map>
Target to match against for determining what to scan and how frequently Structure is documented below.

Outputs

All input properties are implicitly available as output properties. Additionally, the PreventionDiscoveryConfig resource produces the following output properties:

CreateTime string
Output only. The creation timestamp of a DiscoveryConfig.
Errors List<PreventionDiscoveryConfigError>
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
Id string
The provider-assigned unique ID for this managed resource.
LastRunTime string
Output only. The timestamp of the last time this config was executed
Name string
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
UpdateTime string
Output only. The last update timestamp of a DiscoveryConfig.
CreateTime string
Output only. The creation timestamp of a DiscoveryConfig.
Errors []PreventionDiscoveryConfigError
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
Id string
The provider-assigned unique ID for this managed resource.
LastRunTime string
Output only. The timestamp of the last time this config was executed
Name string
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
UpdateTime string
Output only. The last update timestamp of a DiscoveryConfig.
createTime String
Output only. The creation timestamp of a DiscoveryConfig.
errors List<PreventionDiscoveryConfigError>
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
id String
The provider-assigned unique ID for this managed resource.
lastRunTime String
Output only. The timestamp of the last time this config was executed
name String
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
updateTime String
Output only. The last update timestamp of a DiscoveryConfig.
createTime string
Output only. The creation timestamp of a DiscoveryConfig.
errors PreventionDiscoveryConfigError[]
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
id string
The provider-assigned unique ID for this managed resource.
lastRunTime string
Output only. The timestamp of the last time this config was executed
name string
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
updateTime string
Output only. The last update timestamp of a DiscoveryConfig.
create_time str
Output only. The creation timestamp of a DiscoveryConfig.
errors Sequence[PreventionDiscoveryConfigError]
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
id str
The provider-assigned unique ID for this managed resource.
last_run_time str
Output only. The timestamp of the last time this config was executed
name str
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
update_time str
Output only. The last update timestamp of a DiscoveryConfig.
createTime String
Output only. The creation timestamp of a DiscoveryConfig.
errors List<Property Map>
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
id String
The provider-assigned unique ID for this managed resource.
lastRunTime String
Output only. The timestamp of the last time this config was executed
name String
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
updateTime String
Output only. The last update timestamp of a DiscoveryConfig.

Look up Existing PreventionDiscoveryConfig Resource

Get an existing PreventionDiscoveryConfig resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PreventionDiscoveryConfigState, opts?: CustomResourceOptions): PreventionDiscoveryConfig
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        actions: Optional[Sequence[PreventionDiscoveryConfigActionArgs]] = None,
        create_time: Optional[str] = None,
        display_name: Optional[str] = None,
        errors: Optional[Sequence[PreventionDiscoveryConfigErrorArgs]] = None,
        inspect_templates: Optional[Sequence[str]] = None,
        last_run_time: Optional[str] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        org_config: Optional[PreventionDiscoveryConfigOrgConfigArgs] = None,
        parent: Optional[str] = None,
        status: Optional[str] = None,
        targets: Optional[Sequence[PreventionDiscoveryConfigTargetArgs]] = None,
        update_time: Optional[str] = None) -> PreventionDiscoveryConfig
func GetPreventionDiscoveryConfig(ctx *Context, name string, id IDInput, state *PreventionDiscoveryConfigState, opts ...ResourceOption) (*PreventionDiscoveryConfig, error)
public static PreventionDiscoveryConfig Get(string name, Input<string> id, PreventionDiscoveryConfigState? state, CustomResourceOptions? opts = null)
public static PreventionDiscoveryConfig get(String name, Output<String> id, PreventionDiscoveryConfigState state, CustomResourceOptions options)
resources:  _:    type: gcp:dataloss:PreventionDiscoveryConfig    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Actions List<PreventionDiscoveryConfigAction>
Actions to execute at the completion of scanning Structure is documented below.
CreateTime string
Output only. The creation timestamp of a DiscoveryConfig.
DisplayName string
Display Name (max 1000 Chars)
Errors List<PreventionDiscoveryConfigError>
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
InspectTemplates List<string>
Detection logic for profile generation
LastRunTime string
Output only. The timestamp of the last time this config was executed
Location Changes to this property will trigger replacement. string
Location to create the discovery config in.

Name string
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
OrgConfig PreventionDiscoveryConfigOrgConfig
A nested object resource. Structure is documented below.
Parent Changes to this property will trigger replacement. string
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
Status string
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
Targets List<PreventionDiscoveryConfigTarget>
Target to match against for determining what to scan and how frequently Structure is documented below.
UpdateTime string
Output only. The last update timestamp of a DiscoveryConfig.
Actions []PreventionDiscoveryConfigActionArgs
Actions to execute at the completion of scanning Structure is documented below.
CreateTime string
Output only. The creation timestamp of a DiscoveryConfig.
DisplayName string
Display Name (max 1000 Chars)
Errors []PreventionDiscoveryConfigErrorArgs
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
InspectTemplates []string
Detection logic for profile generation
LastRunTime string
Output only. The timestamp of the last time this config was executed
Location Changes to this property will trigger replacement. string
Location to create the discovery config in.

Name string
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
OrgConfig PreventionDiscoveryConfigOrgConfigArgs
A nested object resource. Structure is documented below.
Parent Changes to this property will trigger replacement. string
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
Status string
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
Targets []PreventionDiscoveryConfigTargetArgs
Target to match against for determining what to scan and how frequently Structure is documented below.
UpdateTime string
Output only. The last update timestamp of a DiscoveryConfig.
actions List<PreventionDiscoveryConfigAction>
Actions to execute at the completion of scanning Structure is documented below.
createTime String
Output only. The creation timestamp of a DiscoveryConfig.
displayName String
Display Name (max 1000 Chars)
errors List<PreventionDiscoveryConfigError>
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
inspectTemplates List<String>
Detection logic for profile generation
lastRunTime String
Output only. The timestamp of the last time this config was executed
location Changes to this property will trigger replacement. String
Location to create the discovery config in.

name String
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
orgConfig PreventionDiscoveryConfigOrgConfig
A nested object resource. Structure is documented below.
parent Changes to this property will trigger replacement. String
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
status String
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
targets List<PreventionDiscoveryConfigTarget>
Target to match against for determining what to scan and how frequently Structure is documented below.
updateTime String
Output only. The last update timestamp of a DiscoveryConfig.
actions PreventionDiscoveryConfigAction[]
Actions to execute at the completion of scanning Structure is documented below.
createTime string
Output only. The creation timestamp of a DiscoveryConfig.
displayName string
Display Name (max 1000 Chars)
errors PreventionDiscoveryConfigError[]
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
inspectTemplates string[]
Detection logic for profile generation
lastRunTime string
Output only. The timestamp of the last time this config was executed
location Changes to this property will trigger replacement. string
Location to create the discovery config in.

name string
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
orgConfig PreventionDiscoveryConfigOrgConfig
A nested object resource. Structure is documented below.
parent Changes to this property will trigger replacement. string
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
status string
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
targets PreventionDiscoveryConfigTarget[]
Target to match against for determining what to scan and how frequently Structure is documented below.
updateTime string
Output only. The last update timestamp of a DiscoveryConfig.
actions Sequence[PreventionDiscoveryConfigActionArgs]
Actions to execute at the completion of scanning Structure is documented below.
create_time str
Output only. The creation timestamp of a DiscoveryConfig.
display_name str
Display Name (max 1000 Chars)
errors Sequence[PreventionDiscoveryConfigErrorArgs]
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
inspect_templates Sequence[str]
Detection logic for profile generation
last_run_time str
Output only. The timestamp of the last time this config was executed
location Changes to this property will trigger replacement. str
Location to create the discovery config in.

name str
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
org_config PreventionDiscoveryConfigOrgConfigArgs
A nested object resource. Structure is documented below.
parent Changes to this property will trigger replacement. str
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
status str
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
targets Sequence[PreventionDiscoveryConfigTargetArgs]
Target to match against for determining what to scan and how frequently Structure is documented below.
update_time str
Output only. The last update timestamp of a DiscoveryConfig.
actions List<Property Map>
Actions to execute at the completion of scanning Structure is documented below.
createTime String
Output only. The creation timestamp of a DiscoveryConfig.
displayName String
Display Name (max 1000 Chars)
errors List<Property Map>
Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. Structure is documented below.
inspectTemplates List<String>
Detection logic for profile generation
lastRunTime String
Output only. The timestamp of the last time this config was executed
location Changes to this property will trigger replacement. String
Location to create the discovery config in.

name String
Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created.
orgConfig Property Map
A nested object resource. Structure is documented below.
parent Changes to this property will trigger replacement. String
The parent of the discovery config in any of the following formats:

  • projects/{{project}}/locations/{{location}}
  • organizations/{{organization_id}}/locations/{{location}}
status String
Required. A status for this configuration Possible values are: RUNNING, PAUSED.
targets List<Property Map>
Target to match against for determining what to scan and how frequently Structure is documented below.
updateTime String
Output only. The last update timestamp of a DiscoveryConfig.

Supporting Types

PreventionDiscoveryConfigAction
, PreventionDiscoveryConfigActionArgs

ExportData PreventionDiscoveryConfigActionExportData
Export data profiles into a provided location Structure is documented below.
PubSubNotification PreventionDiscoveryConfigActionPubSubNotification
Publish a message into the Pub/Sub topic. Structure is documented below.
TagResources PreventionDiscoveryConfigActionTagResources
Publish a message into the Pub/Sub topic. Structure is documented below.
ExportData PreventionDiscoveryConfigActionExportData
Export data profiles into a provided location Structure is documented below.
PubSubNotification PreventionDiscoveryConfigActionPubSubNotification
Publish a message into the Pub/Sub topic. Structure is documented below.
TagResources PreventionDiscoveryConfigActionTagResources
Publish a message into the Pub/Sub topic. Structure is documented below.
exportData PreventionDiscoveryConfigActionExportData
Export data profiles into a provided location Structure is documented below.
pubSubNotification PreventionDiscoveryConfigActionPubSubNotification
Publish a message into the Pub/Sub topic. Structure is documented below.
tagResources PreventionDiscoveryConfigActionTagResources
Publish a message into the Pub/Sub topic. Structure is documented below.
exportData PreventionDiscoveryConfigActionExportData
Export data profiles into a provided location Structure is documented below.
pubSubNotification PreventionDiscoveryConfigActionPubSubNotification
Publish a message into the Pub/Sub topic. Structure is documented below.
tagResources PreventionDiscoveryConfigActionTagResources
Publish a message into the Pub/Sub topic. Structure is documented below.
export_data PreventionDiscoveryConfigActionExportData
Export data profiles into a provided location Structure is documented below.
pub_sub_notification PreventionDiscoveryConfigActionPubSubNotification
Publish a message into the Pub/Sub topic. Structure is documented below.
tag_resources PreventionDiscoveryConfigActionTagResources
Publish a message into the Pub/Sub topic. Structure is documented below.
exportData Property Map
Export data profiles into a provided location Structure is documented below.
pubSubNotification Property Map
Publish a message into the Pub/Sub topic. Structure is documented below.
tagResources Property Map
Publish a message into the Pub/Sub topic. Structure is documented below.

PreventionDiscoveryConfigActionExportData
, PreventionDiscoveryConfigActionExportDataArgs

ProfileTable PreventionDiscoveryConfigActionExportDataProfileTable
Store all table and column profiles in an existing table or a new table in an existing dataset. Each re-generation will result in a new row in BigQuery Structure is documented below.
ProfileTable PreventionDiscoveryConfigActionExportDataProfileTable
Store all table and column profiles in an existing table or a new table in an existing dataset. Each re-generation will result in a new row in BigQuery Structure is documented below.
profileTable PreventionDiscoveryConfigActionExportDataProfileTable
Store all table and column profiles in an existing table or a new table in an existing dataset. Each re-generation will result in a new row in BigQuery Structure is documented below.
profileTable PreventionDiscoveryConfigActionExportDataProfileTable
Store all table and column profiles in an existing table or a new table in an existing dataset. Each re-generation will result in a new row in BigQuery Structure is documented below.
profile_table PreventionDiscoveryConfigActionExportDataProfileTable
Store all table and column profiles in an existing table or a new table in an existing dataset. Each re-generation will result in a new row in BigQuery Structure is documented below.
profileTable Property Map
Store all table and column profiles in an existing table or a new table in an existing dataset. Each re-generation will result in a new row in BigQuery Structure is documented below.

PreventionDiscoveryConfigActionExportDataProfileTable
, PreventionDiscoveryConfigActionExportDataProfileTableArgs

DatasetId string
Dataset Id of the table
ProjectId string
The Google Cloud Platform project ID of the project containing the table. If omitted, the project ID is inferred from the API call.
TableId string
Name of the table
DatasetId string
Dataset Id of the table
ProjectId string
The Google Cloud Platform project ID of the project containing the table. If omitted, the project ID is inferred from the API call.
TableId string
Name of the table
datasetId String
Dataset Id of the table
projectId String
The Google Cloud Platform project ID of the project containing the table. If omitted, the project ID is inferred from the API call.
tableId String
Name of the table
datasetId string
Dataset Id of the table
projectId string
The Google Cloud Platform project ID of the project containing the table. If omitted, the project ID is inferred from the API call.
tableId string
Name of the table
dataset_id str
Dataset Id of the table
project_id str
The Google Cloud Platform project ID of the project containing the table. If omitted, the project ID is inferred from the API call.
table_id str
Name of the table
datasetId String
Dataset Id of the table
projectId String
The Google Cloud Platform project ID of the project containing the table. If omitted, the project ID is inferred from the API call.
tableId String
Name of the table

PreventionDiscoveryConfigActionPubSubNotification
, PreventionDiscoveryConfigActionPubSubNotificationArgs

DetailOfMessage string
How much data to include in the pub/sub message. Possible values are: TABLE_PROFILE, RESOURCE_NAME.
Event string
The type of event that triggers a Pub/Sub. At most one PubSubNotification per EventType is permitted. Possible values are: NEW_PROFILE, CHANGED_PROFILE, SCORE_INCREASED, ERROR_CHANGED.
PubsubCondition PreventionDiscoveryConfigActionPubSubNotificationPubsubCondition
Conditions for triggering pubsub Structure is documented below.
Topic string
Cloud Pub/Sub topic to send notifications to. Format is projects/{project}/topics/{topic}.
DetailOfMessage string
How much data to include in the pub/sub message. Possible values are: TABLE_PROFILE, RESOURCE_NAME.
Event string
The type of event that triggers a Pub/Sub. At most one PubSubNotification per EventType is permitted. Possible values are: NEW_PROFILE, CHANGED_PROFILE, SCORE_INCREASED, ERROR_CHANGED.
PubsubCondition PreventionDiscoveryConfigActionPubSubNotificationPubsubCondition
Conditions for triggering pubsub Structure is documented below.
Topic string
Cloud Pub/Sub topic to send notifications to. Format is projects/{project}/topics/{topic}.
detailOfMessage String
How much data to include in the pub/sub message. Possible values are: TABLE_PROFILE, RESOURCE_NAME.
event String
The type of event that triggers a Pub/Sub. At most one PubSubNotification per EventType is permitted. Possible values are: NEW_PROFILE, CHANGED_PROFILE, SCORE_INCREASED, ERROR_CHANGED.
pubsubCondition PreventionDiscoveryConfigActionPubSubNotificationPubsubCondition
Conditions for triggering pubsub Structure is documented below.
topic String
Cloud Pub/Sub topic to send notifications to. Format is projects/{project}/topics/{topic}.
detailOfMessage string
How much data to include in the pub/sub message. Possible values are: TABLE_PROFILE, RESOURCE_NAME.
event string
The type of event that triggers a Pub/Sub. At most one PubSubNotification per EventType is permitted. Possible values are: NEW_PROFILE, CHANGED_PROFILE, SCORE_INCREASED, ERROR_CHANGED.
pubsubCondition PreventionDiscoveryConfigActionPubSubNotificationPubsubCondition
Conditions for triggering pubsub Structure is documented below.
topic string
Cloud Pub/Sub topic to send notifications to. Format is projects/{project}/topics/{topic}.
detail_of_message str
How much data to include in the pub/sub message. Possible values are: TABLE_PROFILE, RESOURCE_NAME.
event str
The type of event that triggers a Pub/Sub. At most one PubSubNotification per EventType is permitted. Possible values are: NEW_PROFILE, CHANGED_PROFILE, SCORE_INCREASED, ERROR_CHANGED.
pubsub_condition PreventionDiscoveryConfigActionPubSubNotificationPubsubCondition
Conditions for triggering pubsub Structure is documented below.
topic str
Cloud Pub/Sub topic to send notifications to. Format is projects/{project}/topics/{topic}.
detailOfMessage String
How much data to include in the pub/sub message. Possible values are: TABLE_PROFILE, RESOURCE_NAME.
event String
The type of event that triggers a Pub/Sub. At most one PubSubNotification per EventType is permitted. Possible values are: NEW_PROFILE, CHANGED_PROFILE, SCORE_INCREASED, ERROR_CHANGED.
pubsubCondition Property Map
Conditions for triggering pubsub Structure is documented below.
topic String
Cloud Pub/Sub topic to send notifications to. Format is projects/{project}/topics/{topic}.

PreventionDiscoveryConfigActionPubSubNotificationPubsubCondition
, PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionArgs

expressions Property Map
An expression Structure is documented below.

PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressions
, PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsArgs

Conditions List<PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsCondition>
Conditions to apply to the expression Structure is documented below.
LogicalOperator string
The operator to apply to the collection of conditions Possible values are: OR, AND.
Conditions []PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsCondition
Conditions to apply to the expression Structure is documented below.
LogicalOperator string
The operator to apply to the collection of conditions Possible values are: OR, AND.
conditions List<PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsCondition>
Conditions to apply to the expression Structure is documented below.
logicalOperator String
The operator to apply to the collection of conditions Possible values are: OR, AND.
conditions PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsCondition[]
Conditions to apply to the expression Structure is documented below.
logicalOperator string
The operator to apply to the collection of conditions Possible values are: OR, AND.
conditions Sequence[PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsCondition]
Conditions to apply to the expression Structure is documented below.
logical_operator str
The operator to apply to the collection of conditions Possible values are: OR, AND.
conditions List<Property Map>
Conditions to apply to the expression Structure is documented below.
logicalOperator String
The operator to apply to the collection of conditions Possible values are: OR, AND.

PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsCondition
, PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsConditionArgs

MinimumRiskScore string
The minimum data risk score that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
MinimumSensitivityScore string
The minimum sensitivity level that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
MinimumRiskScore string
The minimum data risk score that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
MinimumSensitivityScore string
The minimum sensitivity level that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
minimumRiskScore String
The minimum data risk score that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
minimumSensitivityScore String
The minimum sensitivity level that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
minimumRiskScore string
The minimum data risk score that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
minimumSensitivityScore string
The minimum sensitivity level that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
minimum_risk_score str
The minimum data risk score that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
minimum_sensitivity_score str
The minimum sensitivity level that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
minimumRiskScore String
The minimum data risk score that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.
minimumSensitivityScore String
The minimum sensitivity level that triggers the condition. Possible values are: HIGH, MEDIUM_OR_HIGH.

PreventionDiscoveryConfigActionTagResources
, PreventionDiscoveryConfigActionTagResourcesArgs

LowerDataRiskToLow bool
Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an IAM deny policy, you can deny all principals a permission if a tag value is present, mitigating the risk of the resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles.
ProfileGenerationsToTags List<string>
The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include both PROFILE_GENERATION_NEW and PROFILE_GENERATION_UPDATE. Each value may be one of: PROFILE_GENERATION_NEW, PROFILE_GENERATION_UPDATE.
TagConditions List<PreventionDiscoveryConfigActionTagResourcesTagCondition>
The tags to associate with different conditions. Structure is documented below.
LowerDataRiskToLow bool
Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an IAM deny policy, you can deny all principals a permission if a tag value is present, mitigating the risk of the resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles.
ProfileGenerationsToTags []string
The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include both PROFILE_GENERATION_NEW and PROFILE_GENERATION_UPDATE. Each value may be one of: PROFILE_GENERATION_NEW, PROFILE_GENERATION_UPDATE.
TagConditions []PreventionDiscoveryConfigActionTagResourcesTagCondition
The tags to associate with different conditions. Structure is documented below.
lowerDataRiskToLow Boolean
Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an IAM deny policy, you can deny all principals a permission if a tag value is present, mitigating the risk of the resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles.
profileGenerationsToTags List<String>
The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include both PROFILE_GENERATION_NEW and PROFILE_GENERATION_UPDATE. Each value may be one of: PROFILE_GENERATION_NEW, PROFILE_GENERATION_UPDATE.
tagConditions List<PreventionDiscoveryConfigActionTagResourcesTagCondition>
The tags to associate with different conditions. Structure is documented below.
lowerDataRiskToLow boolean
Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an IAM deny policy, you can deny all principals a permission if a tag value is present, mitigating the risk of the resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles.
profileGenerationsToTags string[]
The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include both PROFILE_GENERATION_NEW and PROFILE_GENERATION_UPDATE. Each value may be one of: PROFILE_GENERATION_NEW, PROFILE_GENERATION_UPDATE.
tagConditions PreventionDiscoveryConfigActionTagResourcesTagCondition[]
The tags to associate with different conditions. Structure is documented below.
lower_data_risk_to_low bool
Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an IAM deny policy, you can deny all principals a permission if a tag value is present, mitigating the risk of the resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles.
profile_generations_to_tags Sequence[str]
The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include both PROFILE_GENERATION_NEW and PROFILE_GENERATION_UPDATE. Each value may be one of: PROFILE_GENERATION_NEW, PROFILE_GENERATION_UPDATE.
tag_conditions Sequence[PreventionDiscoveryConfigActionTagResourcesTagCondition]
The tags to associate with different conditions. Structure is documented below.
lowerDataRiskToLow Boolean
Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an IAM deny policy, you can deny all principals a permission if a tag value is present, mitigating the risk of the resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles.
profileGenerationsToTags List<String>
The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include both PROFILE_GENERATION_NEW and PROFILE_GENERATION_UPDATE. Each value may be one of: PROFILE_GENERATION_NEW, PROFILE_GENERATION_UPDATE.
tagConditions List<Property Map>
The tags to associate with different conditions. Structure is documented below.

PreventionDiscoveryConfigActionTagResourcesTagCondition
, PreventionDiscoveryConfigActionTagResourcesTagConditionArgs

SensitivityScore PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScore
Conditions attaching the tag to a resource on its profile having this sensitivity score. Structure is documented below.
Tag PreventionDiscoveryConfigActionTagResourcesTagConditionTag
The tag value to attach to resources. Structure is documented below.
SensitivityScore PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScore
Conditions attaching the tag to a resource on its profile having this sensitivity score. Structure is documented below.
Tag PreventionDiscoveryConfigActionTagResourcesTagConditionTag
The tag value to attach to resources. Structure is documented below.
sensitivityScore PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScore
Conditions attaching the tag to a resource on its profile having this sensitivity score. Structure is documented below.
tag PreventionDiscoveryConfigActionTagResourcesTagConditionTag
The tag value to attach to resources. Structure is documented below.
sensitivityScore PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScore
Conditions attaching the tag to a resource on its profile having this sensitivity score. Structure is documented below.
tag PreventionDiscoveryConfigActionTagResourcesTagConditionTag
The tag value to attach to resources. Structure is documented below.
sensitivity_score PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScore
Conditions attaching the tag to a resource on its profile having this sensitivity score. Structure is documented below.
tag PreventionDiscoveryConfigActionTagResourcesTagConditionTag
The tag value to attach to resources. Structure is documented below.
sensitivityScore Property Map
Conditions attaching the tag to a resource on its profile having this sensitivity score. Structure is documented below.
tag Property Map
The tag value to attach to resources. Structure is documented below.

PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScore
, PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScoreArgs

Score This property is required. string
The sensitivity score applied to the resource. Possible values are: SENSITIVITY_LOW, SENSITIVITY_MODERATE, SENSITIVITY_HIGH.
Score This property is required. string
The sensitivity score applied to the resource. Possible values are: SENSITIVITY_LOW, SENSITIVITY_MODERATE, SENSITIVITY_HIGH.
score This property is required. String
The sensitivity score applied to the resource. Possible values are: SENSITIVITY_LOW, SENSITIVITY_MODERATE, SENSITIVITY_HIGH.
score This property is required. string
The sensitivity score applied to the resource. Possible values are: SENSITIVITY_LOW, SENSITIVITY_MODERATE, SENSITIVITY_HIGH.
score This property is required. str
The sensitivity score applied to the resource. Possible values are: SENSITIVITY_LOW, SENSITIVITY_MODERATE, SENSITIVITY_HIGH.
score This property is required. String
The sensitivity score applied to the resource. Possible values are: SENSITIVITY_LOW, SENSITIVITY_MODERATE, SENSITIVITY_HIGH.

PreventionDiscoveryConfigActionTagResourcesTagConditionTag
, PreventionDiscoveryConfigActionTagResourcesTagConditionTagArgs

NamespacedValue string
The namespaced name for the tag value to attach to resources. Must be in the format {parent_id}/{tag_key_short_name}/{short_name}, for example, "123456/environment/prod".
NamespacedValue string
The namespaced name for the tag value to attach to resources. Must be in the format {parent_id}/{tag_key_short_name}/{short_name}, for example, "123456/environment/prod".
namespacedValue String
The namespaced name for the tag value to attach to resources. Must be in the format {parent_id}/{tag_key_short_name}/{short_name}, for example, "123456/environment/prod".
namespacedValue string
The namespaced name for the tag value to attach to resources. Must be in the format {parent_id}/{tag_key_short_name}/{short_name}, for example, "123456/environment/prod".
namespaced_value str
The namespaced name for the tag value to attach to resources. Must be in the format {parent_id}/{tag_key_short_name}/{short_name}, for example, "123456/environment/prod".
namespacedValue String
The namespaced name for the tag value to attach to resources. Must be in the format {parent_id}/{tag_key_short_name}/{short_name}, for example, "123456/environment/prod".

PreventionDiscoveryConfigError
, PreventionDiscoveryConfigErrorArgs

Details PreventionDiscoveryConfigErrorDetails
A list of messages that carry the error details.
Timestamp string
The times the error occurred. List includes the oldest timestamp and the last 9 timestamps.
Details PreventionDiscoveryConfigErrorDetails
A list of messages that carry the error details.
Timestamp string
The times the error occurred. List includes the oldest timestamp and the last 9 timestamps.
details PreventionDiscoveryConfigErrorDetails
A list of messages that carry the error details.
timestamp String
The times the error occurred. List includes the oldest timestamp and the last 9 timestamps.
details PreventionDiscoveryConfigErrorDetails
A list of messages that carry the error details.
timestamp string
The times the error occurred. List includes the oldest timestamp and the last 9 timestamps.
details PreventionDiscoveryConfigErrorDetails
A list of messages that carry the error details.
timestamp str
The times the error occurred. List includes the oldest timestamp and the last 9 timestamps.
details Property Map
A list of messages that carry the error details.
timestamp String
The times the error occurred. List includes the oldest timestamp and the last 9 timestamps.

PreventionDiscoveryConfigErrorDetails
, PreventionDiscoveryConfigErrorDetailsArgs

Code int
The status code, which should be an enum value of google.rpc.Code.
Details List<ImmutableDictionary<string, string>>
A list of messages that carry the error details.
Message string
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
Code int
The status code, which should be an enum value of google.rpc.Code.
Details []map[string]string
A list of messages that carry the error details.
Message string
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code Integer
The status code, which should be an enum value of google.rpc.Code.
details List<Map<String,String>>
A list of messages that carry the error details.
message String
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code number
The status code, which should be an enum value of google.rpc.Code.
details {[key: string]: string}[]
A list of messages that carry the error details.
message string
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code int
The status code, which should be an enum value of google.rpc.Code.
details Sequence[Mapping[str, str]]
A list of messages that carry the error details.
message str
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
code Number
The status code, which should be an enum value of google.rpc.Code.
details List<Map<String>>
A list of messages that carry the error details.
message String
A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

PreventionDiscoveryConfigOrgConfig
, PreventionDiscoveryConfigOrgConfigArgs

Location PreventionDiscoveryConfigOrgConfigLocation
The data to scan folder org or project Structure is documented below.
ProjectId string
The project that will run the scan. The DLP service account that exists within this project must have access to all resources that are profiled, and the cloud DLP API must be enabled.
Location PreventionDiscoveryConfigOrgConfigLocation
The data to scan folder org or project Structure is documented below.
ProjectId string
The project that will run the scan. The DLP service account that exists within this project must have access to all resources that are profiled, and the cloud DLP API must be enabled.
location PreventionDiscoveryConfigOrgConfigLocation
The data to scan folder org or project Structure is documented below.
projectId String
The project that will run the scan. The DLP service account that exists within this project must have access to all resources that are profiled, and the cloud DLP API must be enabled.
location PreventionDiscoveryConfigOrgConfigLocation
The data to scan folder org or project Structure is documented below.
projectId string
The project that will run the scan. The DLP service account that exists within this project must have access to all resources that are profiled, and the cloud DLP API must be enabled.
location PreventionDiscoveryConfigOrgConfigLocation
The data to scan folder org or project Structure is documented below.
project_id str
The project that will run the scan. The DLP service account that exists within this project must have access to all resources that are profiled, and the cloud DLP API must be enabled.
location Property Map
The data to scan folder org or project Structure is documented below.
projectId String
The project that will run the scan. The DLP service account that exists within this project must have access to all resources that are profiled, and the cloud DLP API must be enabled.

PreventionDiscoveryConfigOrgConfigLocation
, PreventionDiscoveryConfigOrgConfigLocationArgs

FolderId string
The ID for the folder within an organization to scan
OrganizationId string
The ID of an organization to scan
FolderId string
The ID for the folder within an organization to scan
OrganizationId string
The ID of an organization to scan
folderId String
The ID for the folder within an organization to scan
organizationId String
The ID of an organization to scan
folderId string
The ID for the folder within an organization to scan
organizationId string
The ID of an organization to scan
folder_id str
The ID for the folder within an organization to scan
organization_id str
The ID of an organization to scan
folderId String
The ID for the folder within an organization to scan
organizationId String
The ID of an organization to scan

PreventionDiscoveryConfigTarget
, PreventionDiscoveryConfigTargetArgs

BigQueryTarget PreventionDiscoveryConfigTargetBigQueryTarget
BigQuery target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
CloudSqlTarget PreventionDiscoveryConfigTargetCloudSqlTarget
Cloud SQL target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
CloudStorageTarget PreventionDiscoveryConfigTargetCloudStorageTarget
Cloud Storage target for Discovery. The first target to match a bucket will be the one applied. Structure is documented below.
SecretsTarget PreventionDiscoveryConfigTargetSecretsTarget
Discovery target that looks for credentials and secrets stored in cloud resource metadata and reports them as vulnerabilities to Security Command Center. Only one target of this type is allowed.
BigQueryTarget PreventionDiscoveryConfigTargetBigQueryTarget
BigQuery target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
CloudSqlTarget PreventionDiscoveryConfigTargetCloudSqlTarget
Cloud SQL target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
CloudStorageTarget PreventionDiscoveryConfigTargetCloudStorageTarget
Cloud Storage target for Discovery. The first target to match a bucket will be the one applied. Structure is documented below.
SecretsTarget PreventionDiscoveryConfigTargetSecretsTarget
Discovery target that looks for credentials and secrets stored in cloud resource metadata and reports them as vulnerabilities to Security Command Center. Only one target of this type is allowed.
bigQueryTarget PreventionDiscoveryConfigTargetBigQueryTarget
BigQuery target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
cloudSqlTarget PreventionDiscoveryConfigTargetCloudSqlTarget
Cloud SQL target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
cloudStorageTarget PreventionDiscoveryConfigTargetCloudStorageTarget
Cloud Storage target for Discovery. The first target to match a bucket will be the one applied. Structure is documented below.
secretsTarget PreventionDiscoveryConfigTargetSecretsTarget
Discovery target that looks for credentials and secrets stored in cloud resource metadata and reports them as vulnerabilities to Security Command Center. Only one target of this type is allowed.
bigQueryTarget PreventionDiscoveryConfigTargetBigQueryTarget
BigQuery target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
cloudSqlTarget PreventionDiscoveryConfigTargetCloudSqlTarget
Cloud SQL target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
cloudStorageTarget PreventionDiscoveryConfigTargetCloudStorageTarget
Cloud Storage target for Discovery. The first target to match a bucket will be the one applied. Structure is documented below.
secretsTarget PreventionDiscoveryConfigTargetSecretsTarget
Discovery target that looks for credentials and secrets stored in cloud resource metadata and reports them as vulnerabilities to Security Command Center. Only one target of this type is allowed.
big_query_target PreventionDiscoveryConfigTargetBigQueryTarget
BigQuery target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
cloud_sql_target PreventionDiscoveryConfigTargetCloudSqlTarget
Cloud SQL target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
cloud_storage_target PreventionDiscoveryConfigTargetCloudStorageTarget
Cloud Storage target for Discovery. The first target to match a bucket will be the one applied. Structure is documented below.
secrets_target PreventionDiscoveryConfigTargetSecretsTarget
Discovery target that looks for credentials and secrets stored in cloud resource metadata and reports them as vulnerabilities to Security Command Center. Only one target of this type is allowed.
bigQueryTarget Property Map
BigQuery target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
cloudSqlTarget Property Map
Cloud SQL target for Discovery. The first target to match a table will be the one applied. Structure is documented below.
cloudStorageTarget Property Map
Cloud Storage target for Discovery. The first target to match a bucket will be the one applied. Structure is documented below.
secretsTarget Property Map
Discovery target that looks for credentials and secrets stored in cloud resource metadata and reports them as vulnerabilities to Security Command Center. Only one target of this type is allowed.

PreventionDiscoveryConfigTargetBigQueryTarget
, PreventionDiscoveryConfigTargetBigQueryTargetArgs

Cadence PreventionDiscoveryConfigTargetBigQueryTargetCadence
How often and when to update profiles. New tables that match both the fiter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
Conditions PreventionDiscoveryConfigTargetBigQueryTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated Structure is documented below.
Disabled PreventionDiscoveryConfigTargetBigQueryTargetDisabled
Tables that match this filter will not have profiles created.
Filter PreventionDiscoveryConfigTargetBigQueryTargetFilter
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table Structure is documented below.
Cadence PreventionDiscoveryConfigTargetBigQueryTargetCadence
How often and when to update profiles. New tables that match both the fiter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
Conditions PreventionDiscoveryConfigTargetBigQueryTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated Structure is documented below.
Disabled PreventionDiscoveryConfigTargetBigQueryTargetDisabled
Tables that match this filter will not have profiles created.
Filter PreventionDiscoveryConfigTargetBigQueryTargetFilter
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table Structure is documented below.
cadence PreventionDiscoveryConfigTargetBigQueryTargetCadence
How often and when to update profiles. New tables that match both the fiter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
conditions PreventionDiscoveryConfigTargetBigQueryTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated Structure is documented below.
disabled PreventionDiscoveryConfigTargetBigQueryTargetDisabled
Tables that match this filter will not have profiles created.
filter PreventionDiscoveryConfigTargetBigQueryTargetFilter
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table Structure is documented below.
cadence PreventionDiscoveryConfigTargetBigQueryTargetCadence
How often and when to update profiles. New tables that match both the fiter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
conditions PreventionDiscoveryConfigTargetBigQueryTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated Structure is documented below.
disabled PreventionDiscoveryConfigTargetBigQueryTargetDisabled
Tables that match this filter will not have profiles created.
filter PreventionDiscoveryConfigTargetBigQueryTargetFilter
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table Structure is documented below.
cadence PreventionDiscoveryConfigTargetBigQueryTargetCadence
How often and when to update profiles. New tables that match both the fiter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
conditions PreventionDiscoveryConfigTargetBigQueryTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated Structure is documented below.
disabled PreventionDiscoveryConfigTargetBigQueryTargetDisabled
Tables that match this filter will not have profiles created.
filter PreventionDiscoveryConfigTargetBigQueryTargetFilter
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table Structure is documented below.
cadence Property Map
How often and when to update profiles. New tables that match both the fiter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
conditions Property Map
In addition to matching the filter, these conditions must be true before a profile is generated Structure is documented below.
disabled Property Map
Tables that match this filter will not have profiles created.
filter Property Map
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table Structure is documented below.

PreventionDiscoveryConfigTargetBigQueryTargetCadence
, PreventionDiscoveryConfigTargetBigQueryTargetCadenceArgs

InspectTemplateModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
SchemaModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadence
Governs when to update data profiles when a schema is modified Structure is documented below.
TableModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadence
Governs when to update profile when a table is modified. Structure is documented below.
InspectTemplateModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
SchemaModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadence
Governs when to update data profiles when a schema is modified Structure is documented below.
TableModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadence
Governs when to update profile when a table is modified. Structure is documented below.
inspectTemplateModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
schemaModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadence
Governs when to update data profiles when a schema is modified Structure is documented below.
tableModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadence
Governs when to update profile when a table is modified. Structure is documented below.
inspectTemplateModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
schemaModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadence
Governs when to update data profiles when a schema is modified Structure is documented below.
tableModifiedCadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadence
Governs when to update profile when a table is modified. Structure is documented below.
inspect_template_modified_cadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
schema_modified_cadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadence
Governs when to update data profiles when a schema is modified Structure is documented below.
table_modified_cadence PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadence
Governs when to update profile when a table is modified. Structure is documented below.
inspectTemplateModifiedCadence Property Map
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
schemaModifiedCadence Property Map
Governs when to update data profiles when a schema is modified Structure is documented below.
tableModifiedCadence Property Map
Governs when to update profile when a table is modified. Structure is documented below.

PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadence
, PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadenceArgs

Frequency string
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
Frequency string
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency String
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency string
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency str
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency String
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.

PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadence
, PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadenceArgs

Frequency string
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
Types List<string>
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.
Frequency string
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
Types []string
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.
frequency String
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types List<String>
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.
frequency string
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types string[]
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.
frequency str
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types Sequence[str]
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.
frequency String
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types List<String>
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.

PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadence
, PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadenceArgs

Frequency string
How frequently data profiles can be updated when tables are modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
Types List<string>
The type of events to consider when deciding if the table has been modified and should have the profile updated. Defaults to MODIFIED_TIMESTAMP Each value may be one of: TABLE_MODIFIED_TIMESTAMP.
Frequency string
How frequently data profiles can be updated when tables are modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
Types []string
The type of events to consider when deciding if the table has been modified and should have the profile updated. Defaults to MODIFIED_TIMESTAMP Each value may be one of: TABLE_MODIFIED_TIMESTAMP.
frequency String
How frequently data profiles can be updated when tables are modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types List<String>
The type of events to consider when deciding if the table has been modified and should have the profile updated. Defaults to MODIFIED_TIMESTAMP Each value may be one of: TABLE_MODIFIED_TIMESTAMP.
frequency string
How frequently data profiles can be updated when tables are modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types string[]
The type of events to consider when deciding if the table has been modified and should have the profile updated. Defaults to MODIFIED_TIMESTAMP Each value may be one of: TABLE_MODIFIED_TIMESTAMP.
frequency str
How frequently data profiles can be updated when tables are modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types Sequence[str]
The type of events to consider when deciding if the table has been modified and should have the profile updated. Defaults to MODIFIED_TIMESTAMP Each value may be one of: TABLE_MODIFIED_TIMESTAMP.
frequency String
How frequently data profiles can be updated when tables are modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types List<String>
The type of events to consider when deciding if the table has been modified and should have the profile updated. Defaults to MODIFIED_TIMESTAMP Each value may be one of: TABLE_MODIFIED_TIMESTAMP.

PreventionDiscoveryConfigTargetBigQueryTargetConditions
, PreventionDiscoveryConfigTargetBigQueryTargetConditionsArgs

CreatedAfter string
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
OrConditions PreventionDiscoveryConfigTargetBigQueryTargetConditionsOrConditions
At least one of the conditions must be true for a table to be scanned. Structure is documented below.
TypeCollection string
Restrict discovery to categories of table types. Currently view, materialized view, snapshot and non-biglake external tables are supported. Possible values are: BIG_QUERY_COLLECTION_ALL_TYPES, BIG_QUERY_COLLECTION_ONLY_SUPPORTED_TYPES.
Types PreventionDiscoveryConfigTargetBigQueryTargetConditionsTypes
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.
CreatedAfter string
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
OrConditions PreventionDiscoveryConfigTargetBigQueryTargetConditionsOrConditions
At least one of the conditions must be true for a table to be scanned. Structure is documented below.
TypeCollection string
Restrict discovery to categories of table types. Currently view, materialized view, snapshot and non-biglake external tables are supported. Possible values are: BIG_QUERY_COLLECTION_ALL_TYPES, BIG_QUERY_COLLECTION_ONLY_SUPPORTED_TYPES.
Types PreventionDiscoveryConfigTargetBigQueryTargetConditionsTypes
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.
createdAfter String
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
orConditions PreventionDiscoveryConfigTargetBigQueryTargetConditionsOrConditions
At least one of the conditions must be true for a table to be scanned. Structure is documented below.
typeCollection String
Restrict discovery to categories of table types. Currently view, materialized view, snapshot and non-biglake external tables are supported. Possible values are: BIG_QUERY_COLLECTION_ALL_TYPES, BIG_QUERY_COLLECTION_ONLY_SUPPORTED_TYPES.
types PreventionDiscoveryConfigTargetBigQueryTargetConditionsTypes
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.
createdAfter string
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
orConditions PreventionDiscoveryConfigTargetBigQueryTargetConditionsOrConditions
At least one of the conditions must be true for a table to be scanned. Structure is documented below.
typeCollection string
Restrict discovery to categories of table types. Currently view, materialized view, snapshot and non-biglake external tables are supported. Possible values are: BIG_QUERY_COLLECTION_ALL_TYPES, BIG_QUERY_COLLECTION_ONLY_SUPPORTED_TYPES.
types PreventionDiscoveryConfigTargetBigQueryTargetConditionsTypes
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.
created_after str
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
or_conditions PreventionDiscoveryConfigTargetBigQueryTargetConditionsOrConditions
At least one of the conditions must be true for a table to be scanned. Structure is documented below.
type_collection str
Restrict discovery to categories of table types. Currently view, materialized view, snapshot and non-biglake external tables are supported. Possible values are: BIG_QUERY_COLLECTION_ALL_TYPES, BIG_QUERY_COLLECTION_ONLY_SUPPORTED_TYPES.
types PreventionDiscoveryConfigTargetBigQueryTargetConditionsTypes
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.
createdAfter String
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
orConditions Property Map
At least one of the conditions must be true for a table to be scanned. Structure is documented below.
typeCollection String
Restrict discovery to categories of table types. Currently view, materialized view, snapshot and non-biglake external tables are supported. Possible values are: BIG_QUERY_COLLECTION_ALL_TYPES, BIG_QUERY_COLLECTION_ONLY_SUPPORTED_TYPES.
types Property Map
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.

PreventionDiscoveryConfigTargetBigQueryTargetConditionsOrConditions
, PreventionDiscoveryConfigTargetBigQueryTargetConditionsOrConditionsArgs

MinAge string
Duration format. The minimum age a table must have before Cloud DLP can profile it. Value greater than 1.
MinRowCount int
Minimum number of rows that should be present before Cloud DLP profiles as a table.
MinAge string
Duration format. The minimum age a table must have before Cloud DLP can profile it. Value greater than 1.
MinRowCount int
Minimum number of rows that should be present before Cloud DLP profiles as a table.
minAge String
Duration format. The minimum age a table must have before Cloud DLP can profile it. Value greater than 1.
minRowCount Integer
Minimum number of rows that should be present before Cloud DLP profiles as a table.
minAge string
Duration format. The minimum age a table must have before Cloud DLP can profile it. Value greater than 1.
minRowCount number
Minimum number of rows that should be present before Cloud DLP profiles as a table.
min_age str
Duration format. The minimum age a table must have before Cloud DLP can profile it. Value greater than 1.
min_row_count int
Minimum number of rows that should be present before Cloud DLP profiles as a table.
minAge String
Duration format. The minimum age a table must have before Cloud DLP can profile it. Value greater than 1.
minRowCount Number
Minimum number of rows that should be present before Cloud DLP profiles as a table.

PreventionDiscoveryConfigTargetBigQueryTargetConditionsTypes
, PreventionDiscoveryConfigTargetBigQueryTargetConditionsTypesArgs

Types List<string>
A set of BiqQuery table types Each value may be one of: BIG_QUERY_TABLE_TYPE_TABLE, BIG_QUERY_TABLE_TYPE_EXTERNAL_BIG_LAKE.
Types []string
A set of BiqQuery table types Each value may be one of: BIG_QUERY_TABLE_TYPE_TABLE, BIG_QUERY_TABLE_TYPE_EXTERNAL_BIG_LAKE.
types List<String>
A set of BiqQuery table types Each value may be one of: BIG_QUERY_TABLE_TYPE_TABLE, BIG_QUERY_TABLE_TYPE_EXTERNAL_BIG_LAKE.
types string[]
A set of BiqQuery table types Each value may be one of: BIG_QUERY_TABLE_TYPE_TABLE, BIG_QUERY_TABLE_TYPE_EXTERNAL_BIG_LAKE.
types Sequence[str]
A set of BiqQuery table types Each value may be one of: BIG_QUERY_TABLE_TYPE_TABLE, BIG_QUERY_TABLE_TYPE_EXTERNAL_BIG_LAKE.
types List<String>
A set of BiqQuery table types Each value may be one of: BIG_QUERY_TABLE_TYPE_TABLE, BIG_QUERY_TABLE_TYPE_EXTERNAL_BIG_LAKE.

PreventionDiscoveryConfigTargetBigQueryTargetFilter
, PreventionDiscoveryConfigTargetBigQueryTargetFilterArgs

OtherTables PreventionDiscoveryConfigTargetBigQueryTargetFilterOtherTables
Catch-all. This should always be the last filter in the list because anything above it will apply first.
TableReference PreventionDiscoveryConfigTargetBigQueryTargetFilterTableReference
The table to scan. Discovery configurations including this can only include one DiscoveryTarget (the DiscoveryTarget with this TableReference). Structure is documented below.
Tables PreventionDiscoveryConfigTargetBigQueryTargetFilterTables
A specific set of tables for this filter to apply to. A table collection must be specified in only one filter per config. Structure is documented below.
OtherTables PreventionDiscoveryConfigTargetBigQueryTargetFilterOtherTables
Catch-all. This should always be the last filter in the list because anything above it will apply first.
TableReference PreventionDiscoveryConfigTargetBigQueryTargetFilterTableReference
The table to scan. Discovery configurations including this can only include one DiscoveryTarget (the DiscoveryTarget with this TableReference). Structure is documented below.
Tables PreventionDiscoveryConfigTargetBigQueryTargetFilterTables
A specific set of tables for this filter to apply to. A table collection must be specified in only one filter per config. Structure is documented below.
otherTables PreventionDiscoveryConfigTargetBigQueryTargetFilterOtherTables
Catch-all. This should always be the last filter in the list because anything above it will apply first.
tableReference PreventionDiscoveryConfigTargetBigQueryTargetFilterTableReference
The table to scan. Discovery configurations including this can only include one DiscoveryTarget (the DiscoveryTarget with this TableReference). Structure is documented below.
tables PreventionDiscoveryConfigTargetBigQueryTargetFilterTables
A specific set of tables for this filter to apply to. A table collection must be specified in only one filter per config. Structure is documented below.
otherTables PreventionDiscoveryConfigTargetBigQueryTargetFilterOtherTables
Catch-all. This should always be the last filter in the list because anything above it will apply first.
tableReference PreventionDiscoveryConfigTargetBigQueryTargetFilterTableReference
The table to scan. Discovery configurations including this can only include one DiscoveryTarget (the DiscoveryTarget with this TableReference). Structure is documented below.
tables PreventionDiscoveryConfigTargetBigQueryTargetFilterTables
A specific set of tables for this filter to apply to. A table collection must be specified in only one filter per config. Structure is documented below.
other_tables PreventionDiscoveryConfigTargetBigQueryTargetFilterOtherTables
Catch-all. This should always be the last filter in the list because anything above it will apply first.
table_reference PreventionDiscoveryConfigTargetBigQueryTargetFilterTableReference
The table to scan. Discovery configurations including this can only include one DiscoveryTarget (the DiscoveryTarget with this TableReference). Structure is documented below.
tables PreventionDiscoveryConfigTargetBigQueryTargetFilterTables
A specific set of tables for this filter to apply to. A table collection must be specified in only one filter per config. Structure is documented below.
otherTables Property Map
Catch-all. This should always be the last filter in the list because anything above it will apply first.
tableReference Property Map
The table to scan. Discovery configurations including this can only include one DiscoveryTarget (the DiscoveryTarget with this TableReference). Structure is documented below.
tables Property Map
A specific set of tables for this filter to apply to. A table collection must be specified in only one filter per config. Structure is documented below.

PreventionDiscoveryConfigTargetBigQueryTargetFilterTableReference
, PreventionDiscoveryConfigTargetBigQueryTargetFilterTableReferenceArgs

DatasetId This property is required. string
Dataset ID of the table.
TableId This property is required. string
Name of the table.
DatasetId This property is required. string
Dataset ID of the table.
TableId This property is required. string
Name of the table.
datasetId This property is required. String
Dataset ID of the table.
tableId This property is required. String
Name of the table.
datasetId This property is required. string
Dataset ID of the table.
tableId This property is required. string
Name of the table.
dataset_id This property is required. str
Dataset ID of the table.
table_id This property is required. str
Name of the table.
datasetId This property is required. String
Dataset ID of the table.
tableId This property is required. String
Name of the table.

PreventionDiscoveryConfigTargetBigQueryTargetFilterTables
, PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesArgs

IncludeRegexes PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexes
A collection of regular expressions to match a BQ table against. Structure is documented below.
IncludeRegexes PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexes
A collection of regular expressions to match a BQ table against. Structure is documented below.
includeRegexes PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexes
A collection of regular expressions to match a BQ table against. Structure is documented below.
includeRegexes PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexes
A collection of regular expressions to match a BQ table against. Structure is documented below.
include_regexes PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexes
A collection of regular expressions to match a BQ table against. Structure is documented below.
includeRegexes Property Map
A collection of regular expressions to match a BQ table against. Structure is documented below.

PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexes
, PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesArgs

Patterns List<PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPattern>
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
Patterns []PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPattern
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns List<PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPattern>
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPattern[]
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns Sequence[PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPattern]
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns List<Property Map>
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.

PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPattern
, PreventionDiscoveryConfigTargetBigQueryTargetFilterTablesIncludeRegexesPatternArgs

DatasetIdRegex string
if unset, this property matches all datasets
ProjectIdRegex string
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
TableIdRegex string
if unset, this property matches all tables
DatasetIdRegex string
if unset, this property matches all datasets
ProjectIdRegex string
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
TableIdRegex string
if unset, this property matches all tables
datasetIdRegex String
if unset, this property matches all datasets
projectIdRegex String
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
tableIdRegex String
if unset, this property matches all tables
datasetIdRegex string
if unset, this property matches all datasets
projectIdRegex string
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
tableIdRegex string
if unset, this property matches all tables
dataset_id_regex str
if unset, this property matches all datasets
project_id_regex str
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
table_id_regex str
if unset, this property matches all tables
datasetIdRegex String
if unset, this property matches all datasets
projectIdRegex String
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
tableIdRegex String
if unset, this property matches all tables

PreventionDiscoveryConfigTargetCloudSqlTarget
, PreventionDiscoveryConfigTargetCloudSqlTargetArgs

Filter This property is required. PreventionDiscoveryConfigTargetCloudSqlTargetFilter
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table. Structure is documented below.
Conditions PreventionDiscoveryConfigTargetCloudSqlTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
Disabled PreventionDiscoveryConfigTargetCloudSqlTargetDisabled
Disable profiling for database resources that match this filter.
GenerationCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadence
How often and when to update profiles. New tables that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
Filter This property is required. PreventionDiscoveryConfigTargetCloudSqlTargetFilter
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table. Structure is documented below.
Conditions PreventionDiscoveryConfigTargetCloudSqlTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
Disabled PreventionDiscoveryConfigTargetCloudSqlTargetDisabled
Disable profiling for database resources that match this filter.
GenerationCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadence
How often and when to update profiles. New tables that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
filter This property is required. PreventionDiscoveryConfigTargetCloudSqlTargetFilter
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table. Structure is documented below.
conditions PreventionDiscoveryConfigTargetCloudSqlTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
disabled PreventionDiscoveryConfigTargetCloudSqlTargetDisabled
Disable profiling for database resources that match this filter.
generationCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadence
How often and when to update profiles. New tables that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
filter This property is required. PreventionDiscoveryConfigTargetCloudSqlTargetFilter
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table. Structure is documented below.
conditions PreventionDiscoveryConfigTargetCloudSqlTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
disabled PreventionDiscoveryConfigTargetCloudSqlTargetDisabled
Disable profiling for database resources that match this filter.
generationCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadence
How often and when to update profiles. New tables that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
filter This property is required. PreventionDiscoveryConfigTargetCloudSqlTargetFilter
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table. Structure is documented below.
conditions PreventionDiscoveryConfigTargetCloudSqlTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
disabled PreventionDiscoveryConfigTargetCloudSqlTargetDisabled
Disable profiling for database resources that match this filter.
generation_cadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadence
How often and when to update profiles. New tables that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
filter This property is required. Property Map
Required. The tables the discovery cadence applies to. The first target with a matching filter will be the one to apply to a table. Structure is documented below.
conditions Property Map
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
disabled Property Map
Disable profiling for database resources that match this filter.
generationCadence Property Map
How often and when to update profiles. New tables that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.

PreventionDiscoveryConfigTargetCloudSqlTargetConditions
, PreventionDiscoveryConfigTargetCloudSqlTargetConditionsArgs

DatabaseEngines List<string>
Database engines that should be profiled. Optional. Defaults to ALL_SUPPORTED_DATABASE_ENGINES if unspecified. Each value may be one of: ALL_SUPPORTED_DATABASE_ENGINES, MYSQL, POSTGRES.
Types List<string>
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.
DatabaseEngines []string
Database engines that should be profiled. Optional. Defaults to ALL_SUPPORTED_DATABASE_ENGINES if unspecified. Each value may be one of: ALL_SUPPORTED_DATABASE_ENGINES, MYSQL, POSTGRES.
Types []string
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.
databaseEngines List<String>
Database engines that should be profiled. Optional. Defaults to ALL_SUPPORTED_DATABASE_ENGINES if unspecified. Each value may be one of: ALL_SUPPORTED_DATABASE_ENGINES, MYSQL, POSTGRES.
types List<String>
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.
databaseEngines string[]
Database engines that should be profiled. Optional. Defaults to ALL_SUPPORTED_DATABASE_ENGINES if unspecified. Each value may be one of: ALL_SUPPORTED_DATABASE_ENGINES, MYSQL, POSTGRES.
types string[]
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.
database_engines Sequence[str]
Database engines that should be profiled. Optional. Defaults to ALL_SUPPORTED_DATABASE_ENGINES if unspecified. Each value may be one of: ALL_SUPPORTED_DATABASE_ENGINES, MYSQL, POSTGRES.
types Sequence[str]
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.
databaseEngines List<String>
Database engines that should be profiled. Optional. Defaults to ALL_SUPPORTED_DATABASE_ENGINES if unspecified. Each value may be one of: ALL_SUPPORTED_DATABASE_ENGINES, MYSQL, POSTGRES.
types List<String>
Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. Each value may be one of: DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES, DATABASE_RESOURCE_TYPE_TABLE.

PreventionDiscoveryConfigTargetCloudSqlTargetFilter
, PreventionDiscoveryConfigTargetCloudSqlTargetFilterArgs

Collection PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollection
A specific set of buckets for this filter to apply to. Structure is documented below.
DatabaseResourceReference PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReference
The database resource to scan. Targets including this can only include one target (the target with this database resource reference). Structure is documented below.
Others PreventionDiscoveryConfigTargetCloudSqlTargetFilterOthers
Match discovery resources not covered by any other filter.
Collection PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollection
A specific set of buckets for this filter to apply to. Structure is documented below.
DatabaseResourceReference PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReference
The database resource to scan. Targets including this can only include one target (the target with this database resource reference). Structure is documented below.
Others PreventionDiscoveryConfigTargetCloudSqlTargetFilterOthers
Match discovery resources not covered by any other filter.
collection PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollection
A specific set of buckets for this filter to apply to. Structure is documented below.
databaseResourceReference PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReference
The database resource to scan. Targets including this can only include one target (the target with this database resource reference). Structure is documented below.
others PreventionDiscoveryConfigTargetCloudSqlTargetFilterOthers
Match discovery resources not covered by any other filter.
collection PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollection
A specific set of buckets for this filter to apply to. Structure is documented below.
databaseResourceReference PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReference
The database resource to scan. Targets including this can only include one target (the target with this database resource reference). Structure is documented below.
others PreventionDiscoveryConfigTargetCloudSqlTargetFilterOthers
Match discovery resources not covered by any other filter.
collection PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollection
A specific set of buckets for this filter to apply to. Structure is documented below.
database_resource_reference PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReference
The database resource to scan. Targets including this can only include one target (the target with this database resource reference). Structure is documented below.
others PreventionDiscoveryConfigTargetCloudSqlTargetFilterOthers
Match discovery resources not covered by any other filter.
collection Property Map
A specific set of buckets for this filter to apply to. Structure is documented below.
databaseResourceReference Property Map
The database resource to scan. Targets including this can only include one target (the target with this database resource reference). Structure is documented below.
others Property Map
Match discovery resources not covered by any other filter.

PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollection
, PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionArgs

IncludeRegexes PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexes
A collection of regular expressions to match a file store against. Structure is documented below.
IncludeRegexes PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexes
A collection of regular expressions to match a file store against. Structure is documented below.
includeRegexes PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexes
A collection of regular expressions to match a file store against. Structure is documented below.
includeRegexes PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexes
A collection of regular expressions to match a file store against. Structure is documented below.
include_regexes PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexes
A collection of regular expressions to match a file store against. Structure is documented below.
includeRegexes Property Map
A collection of regular expressions to match a file store against. Structure is documented below.

PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexes
, PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesArgs

Patterns List<PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPattern>
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
Patterns []PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPattern
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns List<PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPattern>
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPattern[]
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns Sequence[PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPattern]
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns List<Property Map>
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.

PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPattern
, PreventionDiscoveryConfigTargetCloudSqlTargetFilterCollectionIncludeRegexesPatternArgs

DatabaseRegex string
Regex to test the database name against. If empty, all databases match.
DatabaseResourceNameRegex string
Regex to test the database resource's name against. An example of a database resource name is a table's name. Other database resource names like view names could be included in the future. If empty, all database resources match.'
InstanceRegex string
Regex to test the instance name against. If empty, all instances match.
ProjectIdRegex string
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
DatabaseRegex string
Regex to test the database name against. If empty, all databases match.
DatabaseResourceNameRegex string
Regex to test the database resource's name against. An example of a database resource name is a table's name. Other database resource names like view names could be included in the future. If empty, all database resources match.'
InstanceRegex string
Regex to test the instance name against. If empty, all instances match.
ProjectIdRegex string
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
databaseRegex String
Regex to test the database name against. If empty, all databases match.
databaseResourceNameRegex String
Regex to test the database resource's name against. An example of a database resource name is a table's name. Other database resource names like view names could be included in the future. If empty, all database resources match.'
instanceRegex String
Regex to test the instance name against. If empty, all instances match.
projectIdRegex String
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
databaseRegex string
Regex to test the database name against. If empty, all databases match.
databaseResourceNameRegex string
Regex to test the database resource's name against. An example of a database resource name is a table's name. Other database resource names like view names could be included in the future. If empty, all database resources match.'
instanceRegex string
Regex to test the instance name against. If empty, all instances match.
projectIdRegex string
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
database_regex str
Regex to test the database name against. If empty, all databases match.
database_resource_name_regex str
Regex to test the database resource's name against. An example of a database resource name is a table's name. Other database resource names like view names could be included in the future. If empty, all database resources match.'
instance_regex str
Regex to test the instance name against. If empty, all instances match.
project_id_regex str
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.
databaseRegex String
Regex to test the database name against. If empty, all databases match.
databaseResourceNameRegex String
Regex to test the database resource's name against. An example of a database resource name is a table's name. Other database resource names like view names could be included in the future. If empty, all database resources match.'
instanceRegex String
Regex to test the instance name against. If empty, all instances match.
projectIdRegex String
For organizations, if unset, will match all projects. Has no effect for data profile configurations created within a project.

PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReference
, PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReferenceArgs

Database This property is required. string
Required. Name of a database within the instance.
DatabaseResource This property is required. string
Required. Name of a database resource, for example, a table within the database.
Instance This property is required. string
Required. The instance where this resource is located. For example: Cloud SQL instance ID.
ProjectId This property is required. string
Required. If within a project-level config, then this must match the config's project ID.
Database This property is required. string
Required. Name of a database within the instance.
DatabaseResource This property is required. string
Required. Name of a database resource, for example, a table within the database.
Instance This property is required. string
Required. The instance where this resource is located. For example: Cloud SQL instance ID.
ProjectId This property is required. string
Required. If within a project-level config, then this must match the config's project ID.
database This property is required. String
Required. Name of a database within the instance.
databaseResource This property is required. String
Required. Name of a database resource, for example, a table within the database.
instance This property is required. String
Required. The instance where this resource is located. For example: Cloud SQL instance ID.
projectId This property is required. String
Required. If within a project-level config, then this must match the config's project ID.
database This property is required. string
Required. Name of a database within the instance.
databaseResource This property is required. string
Required. Name of a database resource, for example, a table within the database.
instance This property is required. string
Required. The instance where this resource is located. For example: Cloud SQL instance ID.
projectId This property is required. string
Required. If within a project-level config, then this must match the config's project ID.
database This property is required. str
Required. Name of a database within the instance.
database_resource This property is required. str
Required. Name of a database resource, for example, a table within the database.
instance This property is required. str
Required. The instance where this resource is located. For example: Cloud SQL instance ID.
project_id This property is required. str
Required. If within a project-level config, then this must match the config's project ID.
database This property is required. String
Required. Name of a database within the instance.
databaseResource This property is required. String
Required. Name of a database resource, for example, a table within the database.
instance This property is required. String
Required. The instance where this resource is located. For example: Cloud SQL instance ID.
projectId This property is required. String
Required. If within a project-level config, then this must match the config's project ID.

PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadence
, PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceArgs

InspectTemplateModifiedCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
RefreshFrequency string
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
SchemaModifiedCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadence
Governs when to update data profiles when a schema is modified Structure is documented below.
InspectTemplateModifiedCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
RefreshFrequency string
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
SchemaModifiedCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadence
Governs when to update data profiles when a schema is modified Structure is documented below.
inspectTemplateModifiedCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
refreshFrequency String
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
schemaModifiedCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadence
Governs when to update data profiles when a schema is modified Structure is documented below.
inspectTemplateModifiedCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
refreshFrequency string
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
schemaModifiedCadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadence
Governs when to update data profiles when a schema is modified Structure is documented below.
inspect_template_modified_cadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
refresh_frequency str
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
schema_modified_cadence PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadence
Governs when to update data profiles when a schema is modified Structure is documented below.
inspectTemplateModifiedCadence Property Map
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
refreshFrequency String
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
schemaModifiedCadence Property Map
Governs when to update data profiles when a schema is modified Structure is documented below.

PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadence
, PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadenceArgs

Frequency This property is required. string
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
Frequency This property is required. string
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency This property is required. String
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency This property is required. string
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency This property is required. str
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency This property is required. String
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.

PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadence
, PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadenceArgs

Frequency string
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
Types List<string>
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.
Frequency string
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
Types []string
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.
frequency String
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types List<String>
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.
frequency string
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types string[]
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.
frequency str
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types Sequence[str]
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.
frequency String
Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
types List<String>
The types of schema modifications to consider. Defaults to NEW_COLUMNS. Each value may be one of: NEW_COLUMNS, REMOVED_COLUMNS.

PreventionDiscoveryConfigTargetCloudStorageTarget
, PreventionDiscoveryConfigTargetCloudStorageTargetArgs

Filter This property is required. PreventionDiscoveryConfigTargetCloudStorageTargetFilter
The buckets the generation_cadence applies to. The first target with a matching filter will be the one to apply to a bucket. Structure is documented below.
Conditions PreventionDiscoveryConfigTargetCloudStorageTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
Disabled PreventionDiscoveryConfigTargetCloudStorageTargetDisabled
Disable profiling for buckets that match this filter.
GenerationCadence PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadence
How often and when to update profiles. New buckets that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
Filter This property is required. PreventionDiscoveryConfigTargetCloudStorageTargetFilter
The buckets the generation_cadence applies to. The first target with a matching filter will be the one to apply to a bucket. Structure is documented below.
Conditions PreventionDiscoveryConfigTargetCloudStorageTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
Disabled PreventionDiscoveryConfigTargetCloudStorageTargetDisabled
Disable profiling for buckets that match this filter.
GenerationCadence PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadence
How often and when to update profiles. New buckets that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
filter This property is required. PreventionDiscoveryConfigTargetCloudStorageTargetFilter
The buckets the generation_cadence applies to. The first target with a matching filter will be the one to apply to a bucket. Structure is documented below.
conditions PreventionDiscoveryConfigTargetCloudStorageTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
disabled PreventionDiscoveryConfigTargetCloudStorageTargetDisabled
Disable profiling for buckets that match this filter.
generationCadence PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadence
How often and when to update profiles. New buckets that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
filter This property is required. PreventionDiscoveryConfigTargetCloudStorageTargetFilter
The buckets the generation_cadence applies to. The first target with a matching filter will be the one to apply to a bucket. Structure is documented below.
conditions PreventionDiscoveryConfigTargetCloudStorageTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
disabled PreventionDiscoveryConfigTargetCloudStorageTargetDisabled
Disable profiling for buckets that match this filter.
generationCadence PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadence
How often and when to update profiles. New buckets that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
filter This property is required. PreventionDiscoveryConfigTargetCloudStorageTargetFilter
The buckets the generation_cadence applies to. The first target with a matching filter will be the one to apply to a bucket. Structure is documented below.
conditions PreventionDiscoveryConfigTargetCloudStorageTargetConditions
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
disabled PreventionDiscoveryConfigTargetCloudStorageTargetDisabled
Disable profiling for buckets that match this filter.
generation_cadence PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadence
How often and when to update profiles. New buckets that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.
filter This property is required. Property Map
The buckets the generation_cadence applies to. The first target with a matching filter will be the one to apply to a bucket. Structure is documented below.
conditions Property Map
In addition to matching the filter, these conditions must be true before a profile is generated. Structure is documented below.
disabled Property Map
Disable profiling for buckets that match this filter.
generationCadence Property Map
How often and when to update profiles. New buckets that match both the filter and conditions are scanned as quickly as possible depending on system capacity. Structure is documented below.

PreventionDiscoveryConfigTargetCloudStorageTargetConditions
, PreventionDiscoveryConfigTargetCloudStorageTargetConditionsArgs

CloudStorageConditions PreventionDiscoveryConfigTargetCloudStorageTargetConditionsCloudStorageConditions
Cloud Storage conditions. Structure is documented below.
CreatedAfter string
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
MinAge string
Duration format. Minimum age a file store must have. If set, the value must be 1 hour or greater.
CloudStorageConditions PreventionDiscoveryConfigTargetCloudStorageTargetConditionsCloudStorageConditions
Cloud Storage conditions. Structure is documented below.
CreatedAfter string
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
MinAge string
Duration format. Minimum age a file store must have. If set, the value must be 1 hour or greater.
cloudStorageConditions PreventionDiscoveryConfigTargetCloudStorageTargetConditionsCloudStorageConditions
Cloud Storage conditions. Structure is documented below.
createdAfter String
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
minAge String
Duration format. Minimum age a file store must have. If set, the value must be 1 hour or greater.
cloudStorageConditions PreventionDiscoveryConfigTargetCloudStorageTargetConditionsCloudStorageConditions
Cloud Storage conditions. Structure is documented below.
createdAfter string
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
minAge string
Duration format. Minimum age a file store must have. If set, the value must be 1 hour or greater.
cloud_storage_conditions PreventionDiscoveryConfigTargetCloudStorageTargetConditionsCloudStorageConditions
Cloud Storage conditions. Structure is documented below.
created_after str
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
min_age str
Duration format. Minimum age a file store must have. If set, the value must be 1 hour or greater.
cloudStorageConditions Property Map
Cloud Storage conditions. Structure is documented below.
createdAfter String
File store must have been created after this date. Used to avoid backfilling. A timestamp in RFC3339 UTC "Zulu" format with nanosecond resolution and upto nine fractional digits.
minAge String
Duration format. Minimum age a file store must have. If set, the value must be 1 hour or greater.

PreventionDiscoveryConfigTargetCloudStorageTargetConditionsCloudStorageConditions
, PreventionDiscoveryConfigTargetCloudStorageTargetConditionsCloudStorageConditionsArgs

IncludedBucketAttributes List<string>
Only objects with the specified attributes will be scanned. Defaults to [ALL_SUPPORTED_BUCKETS] if unset. Each value may be one of: ALL_SUPPORTED_BUCKETS, AUTOCLASS_DISABLED, AUTOCLASS_ENABLED.
IncludedObjectAttributes List<string>
Only objects with the specified attributes will be scanned. If an object has one of the specified attributes but is inside an excluded bucket, it will not be scanned. Defaults to [ALL_SUPPORTED_OBJECTS]. A profile will be created even if no objects match the included_object_attributes. Each value may be one of: ALL_SUPPORTED_OBJECTS, STANDARD, NEARLINE, COLDLINE, ARCHIVE, REGIONAL, MULTI_REGIONAL, DURABLE_REDUCED_AVAILABILITY.
IncludedBucketAttributes []string
Only objects with the specified attributes will be scanned. Defaults to [ALL_SUPPORTED_BUCKETS] if unset. Each value may be one of: ALL_SUPPORTED_BUCKETS, AUTOCLASS_DISABLED, AUTOCLASS_ENABLED.
IncludedObjectAttributes []string
Only objects with the specified attributes will be scanned. If an object has one of the specified attributes but is inside an excluded bucket, it will not be scanned. Defaults to [ALL_SUPPORTED_OBJECTS]. A profile will be created even if no objects match the included_object_attributes. Each value may be one of: ALL_SUPPORTED_OBJECTS, STANDARD, NEARLINE, COLDLINE, ARCHIVE, REGIONAL, MULTI_REGIONAL, DURABLE_REDUCED_AVAILABILITY.
includedBucketAttributes List<String>
Only objects with the specified attributes will be scanned. Defaults to [ALL_SUPPORTED_BUCKETS] if unset. Each value may be one of: ALL_SUPPORTED_BUCKETS, AUTOCLASS_DISABLED, AUTOCLASS_ENABLED.
includedObjectAttributes List<String>
Only objects with the specified attributes will be scanned. If an object has one of the specified attributes but is inside an excluded bucket, it will not be scanned. Defaults to [ALL_SUPPORTED_OBJECTS]. A profile will be created even if no objects match the included_object_attributes. Each value may be one of: ALL_SUPPORTED_OBJECTS, STANDARD, NEARLINE, COLDLINE, ARCHIVE, REGIONAL, MULTI_REGIONAL, DURABLE_REDUCED_AVAILABILITY.
includedBucketAttributes string[]
Only objects with the specified attributes will be scanned. Defaults to [ALL_SUPPORTED_BUCKETS] if unset. Each value may be one of: ALL_SUPPORTED_BUCKETS, AUTOCLASS_DISABLED, AUTOCLASS_ENABLED.
includedObjectAttributes string[]
Only objects with the specified attributes will be scanned. If an object has one of the specified attributes but is inside an excluded bucket, it will not be scanned. Defaults to [ALL_SUPPORTED_OBJECTS]. A profile will be created even if no objects match the included_object_attributes. Each value may be one of: ALL_SUPPORTED_OBJECTS, STANDARD, NEARLINE, COLDLINE, ARCHIVE, REGIONAL, MULTI_REGIONAL, DURABLE_REDUCED_AVAILABILITY.
included_bucket_attributes Sequence[str]
Only objects with the specified attributes will be scanned. Defaults to [ALL_SUPPORTED_BUCKETS] if unset. Each value may be one of: ALL_SUPPORTED_BUCKETS, AUTOCLASS_DISABLED, AUTOCLASS_ENABLED.
included_object_attributes Sequence[str]
Only objects with the specified attributes will be scanned. If an object has one of the specified attributes but is inside an excluded bucket, it will not be scanned. Defaults to [ALL_SUPPORTED_OBJECTS]. A profile will be created even if no objects match the included_object_attributes. Each value may be one of: ALL_SUPPORTED_OBJECTS, STANDARD, NEARLINE, COLDLINE, ARCHIVE, REGIONAL, MULTI_REGIONAL, DURABLE_REDUCED_AVAILABILITY.
includedBucketAttributes List<String>
Only objects with the specified attributes will be scanned. Defaults to [ALL_SUPPORTED_BUCKETS] if unset. Each value may be one of: ALL_SUPPORTED_BUCKETS, AUTOCLASS_DISABLED, AUTOCLASS_ENABLED.
includedObjectAttributes List<String>
Only objects with the specified attributes will be scanned. If an object has one of the specified attributes but is inside an excluded bucket, it will not be scanned. Defaults to [ALL_SUPPORTED_OBJECTS]. A profile will be created even if no objects match the included_object_attributes. Each value may be one of: ALL_SUPPORTED_OBJECTS, STANDARD, NEARLINE, COLDLINE, ARCHIVE, REGIONAL, MULTI_REGIONAL, DURABLE_REDUCED_AVAILABILITY.

PreventionDiscoveryConfigTargetCloudStorageTargetFilter
, PreventionDiscoveryConfigTargetCloudStorageTargetFilterArgs

CloudStorageResourceReference PreventionDiscoveryConfigTargetCloudStorageTargetFilterCloudStorageResourceReference
The bucket to scan. Targets including this can only include one target (the target with this bucket). This enables profiling the contents of a single bucket, while the other options allow for easy profiling of many buckets within a project or an organization. Structure is documented below.
Collection PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollection
A specific set of buckets for this filter to apply to. Structure is documented below.
Others PreventionDiscoveryConfigTargetCloudStorageTargetFilterOthers
Match discovery resources not covered by any other filter.
CloudStorageResourceReference PreventionDiscoveryConfigTargetCloudStorageTargetFilterCloudStorageResourceReference
The bucket to scan. Targets including this can only include one target (the target with this bucket). This enables profiling the contents of a single bucket, while the other options allow for easy profiling of many buckets within a project or an organization. Structure is documented below.
Collection PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollection
A specific set of buckets for this filter to apply to. Structure is documented below.
Others PreventionDiscoveryConfigTargetCloudStorageTargetFilterOthers
Match discovery resources not covered by any other filter.
cloudStorageResourceReference PreventionDiscoveryConfigTargetCloudStorageTargetFilterCloudStorageResourceReference
The bucket to scan. Targets including this can only include one target (the target with this bucket). This enables profiling the contents of a single bucket, while the other options allow for easy profiling of many buckets within a project or an organization. Structure is documented below.
collection PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollection
A specific set of buckets for this filter to apply to. Structure is documented below.
others PreventionDiscoveryConfigTargetCloudStorageTargetFilterOthers
Match discovery resources not covered by any other filter.
cloudStorageResourceReference PreventionDiscoveryConfigTargetCloudStorageTargetFilterCloudStorageResourceReference
The bucket to scan. Targets including this can only include one target (the target with this bucket). This enables profiling the contents of a single bucket, while the other options allow for easy profiling of many buckets within a project or an organization. Structure is documented below.
collection PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollection
A specific set of buckets for this filter to apply to. Structure is documented below.
others PreventionDiscoveryConfigTargetCloudStorageTargetFilterOthers
Match discovery resources not covered by any other filter.
cloud_storage_resource_reference PreventionDiscoveryConfigTargetCloudStorageTargetFilterCloudStorageResourceReference
The bucket to scan. Targets including this can only include one target (the target with this bucket). This enables profiling the contents of a single bucket, while the other options allow for easy profiling of many buckets within a project or an organization. Structure is documented below.
collection PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollection
A specific set of buckets for this filter to apply to. Structure is documented below.
others PreventionDiscoveryConfigTargetCloudStorageTargetFilterOthers
Match discovery resources not covered by any other filter.
cloudStorageResourceReference Property Map
The bucket to scan. Targets including this can only include one target (the target with this bucket). This enables profiling the contents of a single bucket, while the other options allow for easy profiling of many buckets within a project or an organization. Structure is documented below.
collection Property Map
A specific set of buckets for this filter to apply to. Structure is documented below.
others Property Map
Match discovery resources not covered by any other filter.

PreventionDiscoveryConfigTargetCloudStorageTargetFilterCloudStorageResourceReference
, PreventionDiscoveryConfigTargetCloudStorageTargetFilterCloudStorageResourceReferenceArgs

BucketName string
The bucket to scan.
ProjectId string
If within a project-level config, then this must match the config's project id.
BucketName string
The bucket to scan.
ProjectId string
If within a project-level config, then this must match the config's project id.
bucketName String
The bucket to scan.
projectId String
If within a project-level config, then this must match the config's project id.
bucketName string
The bucket to scan.
projectId string
If within a project-level config, then this must match the config's project id.
bucket_name str
The bucket to scan.
project_id str
If within a project-level config, then this must match the config's project id.
bucketName String
The bucket to scan.
projectId String
If within a project-level config, then this must match the config's project id.

PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollection
, PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionArgs

IncludeRegexes PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexes
A collection of regular expressions to match a file store against. Structure is documented below.
IncludeRegexes PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexes
A collection of regular expressions to match a file store against. Structure is documented below.
includeRegexes PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexes
A collection of regular expressions to match a file store against. Structure is documented below.
includeRegexes PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexes
A collection of regular expressions to match a file store against. Structure is documented below.
include_regexes PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexes
A collection of regular expressions to match a file store against. Structure is documented below.
includeRegexes Property Map
A collection of regular expressions to match a file store against. Structure is documented below.

PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexes
, PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesArgs

Patterns List<PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPattern>
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
Patterns []PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPattern
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns List<PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPattern>
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPattern[]
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns Sequence[PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPattern]
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.
patterns List<Property Map>
The group of regular expression patterns to match against one or more file stores. Maximum of 100 entries. The sum of all lengths of regular expressions can't exceed 10 KiB. Structure is documented below.

PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPattern
, PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPatternArgs

cloudStorageRegex Property Map
Regex for Cloud Storage. Structure is documented below.

PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPatternCloudStorageRegex
, PreventionDiscoveryConfigTargetCloudStorageTargetFilterCollectionIncludeRegexesPatternCloudStorageRegexArgs

BucketNameRegex string
Regex to test the bucket name against. If empty, all buckets match. Example: "marketing2021" or "(marketing)\d{4}" will both match the bucket gs://marketing2021
ProjectIdRegex string
For organizations, if unset, will match all projects.
BucketNameRegex string
Regex to test the bucket name against. If empty, all buckets match. Example: "marketing2021" or "(marketing)\d{4}" will both match the bucket gs://marketing2021
ProjectIdRegex string
For organizations, if unset, will match all projects.
bucketNameRegex String
Regex to test the bucket name against. If empty, all buckets match. Example: "marketing2021" or "(marketing)\d{4}" will both match the bucket gs://marketing2021
projectIdRegex String
For organizations, if unset, will match all projects.
bucketNameRegex string
Regex to test the bucket name against. If empty, all buckets match. Example: "marketing2021" or "(marketing)\d{4}" will both match the bucket gs://marketing2021
projectIdRegex string
For organizations, if unset, will match all projects.
bucket_name_regex str
Regex to test the bucket name against. If empty, all buckets match. Example: "marketing2021" or "(marketing)\d{4}" will both match the bucket gs://marketing2021
project_id_regex str
For organizations, if unset, will match all projects.
bucketNameRegex String
Regex to test the bucket name against. If empty, all buckets match. Example: "marketing2021" or "(marketing)\d{4}" will both match the bucket gs://marketing2021
projectIdRegex String
For organizations, if unset, will match all projects.

PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadence
, PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceArgs

InspectTemplateModifiedCadence PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
RefreshFrequency string
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
InspectTemplateModifiedCadence PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
RefreshFrequency string
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
inspectTemplateModifiedCadence PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
refreshFrequency String
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
inspectTemplateModifiedCadence PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
refreshFrequency string
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
inspect_template_modified_cadence PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceInspectTemplateModifiedCadence
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
refresh_frequency str
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
inspectTemplateModifiedCadence Property Map
Governs when to update data profiles when the inspection rules defined by the InspectTemplate change. If not set, changing the template will not cause a data profile to update. Structure is documented below.
refreshFrequency String
Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.

PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceInspectTemplateModifiedCadence
, PreventionDiscoveryConfigTargetCloudStorageTargetGenerationCadenceInspectTemplateModifiedCadenceArgs

Frequency string
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
Frequency string
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency String
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency string
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency str
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.
frequency String
How frequently data profiles can be updated when the template is modified. Defaults to never. Possible values are: UPDATE_FREQUENCY_NEVER, UPDATE_FREQUENCY_DAILY, UPDATE_FREQUENCY_MONTHLY.

Import

DiscoveryConfig can be imported using any of these accepted formats:

  • {{parent}}/discoveryConfigs/{{name}}

  • {{parent}}/{{name}}

When using the pulumi import command, DiscoveryConfig can be imported using one of the formats above. For example:

$ pulumi import gcp:dataloss/preventionDiscoveryConfig:PreventionDiscoveryConfig default {{parent}}/discoveryConfigs/{{name}}
Copy
$ pulumi import gcp:dataloss/preventionDiscoveryConfig:PreventionDiscoveryConfig default {{parent}}/{{name}}
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
Google Cloud (GCP) Classic pulumi/pulumi-gcp
License
Apache-2.0
Notes
This Pulumi package is based on the google-beta Terraform Provider.
Google Cloud v8.26.0 published on Thursday, Apr 10, 2025 by Pulumi
pulumi/pulumi-gcp