Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. bigquerydatapolicy
  5. bigquerydatapolicy/v1
  6. DataPolicy

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.bigquerydatapolicy/v1.DataPolicy

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

    Creates a new data policy under a project with the given dataPolicyId (used as the display name), policy tag, and data policy type. Auto-naming is currently not supported for this resource.

    Create DataPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DataPolicy(name: string, args?: DataPolicyArgs, opts?: CustomResourceOptions);
    @overload
def DataPolicy(resource_name: str,
               args: Optional[DataPolicyArgs] = None,
               opts: Optional[ResourceOptions] = None)

@overload
def DataPolicy(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               data_masking_policy: Optional[DataMaskingPolicyArgs] = None,
               data_policy_id: Optional[str] = None,
               data_policy_type: Optional[DataPolicyDataPolicyType] = None,
               location: Optional[str] = None,
               policy_tag: Optional[str] = None,
               project: Optional[str] = None)
    func NewDataPolicy(ctx *Context, name string, args *DataPolicyArgs, opts ...ResourceOption) (*DataPolicy, error)
    public DataPolicy(string name, DataPolicyArgs? args = null, CustomResourceOptions? opts = null)
    public DataPolicy(String name, DataPolicyArgs args)
public DataPolicy(String name, DataPolicyArgs args, CustomResourceOptions options)

    type: google-native:bigquerydatapolicy/v1:DataPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args DataPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DataPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DataPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DataPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DataPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var dataPolicyResource = new GoogleNative.BigQueryDataPolicy.V1.DataPolicy("dataPolicyResource", new()
{
    DataMaskingPolicy = new GoogleNative.BigQueryDataPolicy.V1.Inputs.DataMaskingPolicyArgs
    {
        PredefinedExpression = GoogleNative.BigQueryDataPolicy.V1.DataMaskingPolicyPredefinedExpression.PredefinedExpressionUnspecified,
        Routine = "string",
    },
    DataPolicyId = "string",
    DataPolicyType = GoogleNative.BigQueryDataPolicy.V1.DataPolicyDataPolicyType.DataPolicyTypeUnspecified,
    Location = "string",
    PolicyTag = "string",
    Project = "string",
});

    example, err := bigquerydatapolicy.NewDataPolicy(ctx, "dataPolicyResource", &bigquerydatapolicy.DataPolicyArgs{
	DataMaskingPolicy: &bigquerydatapolicy.DataMaskingPolicyArgs{
		PredefinedExpression: bigquerydatapolicy.DataMaskingPolicyPredefinedExpressionPredefinedExpressionUnspecified,
		Routine:              pulumi.String("string"),
	},
	DataPolicyId:   pulumi.String("string"),
	DataPolicyType: bigquerydatapolicy.DataPolicyDataPolicyTypeDataPolicyTypeUnspecified,
	Location:       pulumi.String("string"),
	PolicyTag:      pulumi.String("string"),
	Project:        pulumi.String("string"),
})

    var dataPolicyResource = new DataPolicy("dataPolicyResource", DataPolicyArgs.builder()
    .dataMaskingPolicy(DataMaskingPolicyArgs.builder()
        .predefinedExpression("PREDEFINED_EXPRESSION_UNSPECIFIED")
        .routine("string")
        .build())
    .dataPolicyId("string")
    .dataPolicyType("DATA_POLICY_TYPE_UNSPECIFIED")
    .location("string")
    .policyTag("string")
    .project("string")
    .build());

    data_policy_resource = google_native.bigquerydatapolicy.v1.DataPolicy("dataPolicyResource",
    data_masking_policy={
        "predefined_expression": google_native.bigquerydatapolicy.v1.DataMaskingPolicyPredefinedExpression.PREDEFINED_EXPRESSION_UNSPECIFIED,
        "routine": "string",
    },
    data_policy_id="string",
    data_policy_type=google_native.bigquerydatapolicy.v1.DataPolicyDataPolicyType.DATA_POLICY_TYPE_UNSPECIFIED,
    location="string",
    policy_tag="string",
    project="string")

    const dataPolicyResource = new google_native.bigquerydatapolicy.v1.DataPolicy("dataPolicyResource", {
    dataMaskingPolicy: {
        predefinedExpression: google_native.bigquerydatapolicy.v1.DataMaskingPolicyPredefinedExpression.PredefinedExpressionUnspecified,
        routine: "string",
    },
    dataPolicyId: "string",
    dataPolicyType: google_native.bigquerydatapolicy.v1.DataPolicyDataPolicyType.DataPolicyTypeUnspecified,
    location: "string",
    policyTag: "string",
    project: "string",
});

    type: google-native:bigquerydatapolicy/v1:DataPolicy
properties:
    dataMaskingPolicy:
        predefinedExpression: PREDEFINED_EXPRESSION_UNSPECIFIED
        routine: string
    dataPolicyId: string
    dataPolicyType: DATA_POLICY_TYPE_UNSPECIFIED
    location: string
    policyTag: string
    project: string

    DataPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DataPolicy resource accepts the following input properties:

    DataMaskingPolicy Pulumi.GoogleNative.BigQueryDataPolicy.V1.Inputs.DataMaskingPolicy
    The data masking policy that specifies the data masking rule to use.
    DataPolicyId string
    User-assigned (human readable) ID of the data policy that needs to be unique within a project. Used as {data_policy_id} in part of the resource name.
    DataPolicyType Pulumi.GoogleNative.BigQueryDataPolicy.V1.DataPolicyDataPolicyType
    Type of data policy.
    Location string
    PolicyTag string
    Policy tag resource name, in the format of projects/{project_number}/locations/{location_id}/taxonomies/{taxonomy_id}/policyTags/{policyTag_id}.
    Project string
    DataMaskingPolicy DataMaskingPolicyArgs
    The data masking policy that specifies the data masking rule to use.
    DataPolicyId string
    User-assigned (human readable) ID of the data policy that needs to be unique within a project. Used as {data_policy_id} in part of the resource name.
    DataPolicyType DataPolicyDataPolicyType
    Type of data policy.
    Location string
    PolicyTag string
    Policy tag resource name, in the format of projects/{project_number}/locations/{location_id}/taxonomies/{taxonomy_id}/policyTags/{policyTag_id}.
    Project string
    dataMaskingPolicy DataMaskingPolicy
    The data masking policy that specifies the data masking rule to use.
    dataPolicyId String
    User-assigned (human readable) ID of the data policy that needs to be unique within a project. Used as {data_policy_id} in part of the resource name.
    dataPolicyType DataPolicyDataPolicyType
    Type of data policy.
    location String
    policyTag String
    Policy tag resource name, in the format of projects/{project_number}/locations/{location_id}/taxonomies/{taxonomy_id}/policyTags/{policyTag_id}.
    project String
    dataMaskingPolicy DataMaskingPolicy
    The data masking policy that specifies the data masking rule to use.
    dataPolicyId string
    User-assigned (human readable) ID of the data policy that needs to be unique within a project. Used as {data_policy_id} in part of the resource name.
    dataPolicyType DataPolicyDataPolicyType
    Type of data policy.
    location string
    policyTag string
    Policy tag resource name, in the format of projects/{project_number}/locations/{location_id}/taxonomies/{taxonomy_id}/policyTags/{policyTag_id}.
    project string
    data_masking_policy DataMaskingPolicyArgs
    The data masking policy that specifies the data masking rule to use.
    data_policy_id str
    User-assigned (human readable) ID of the data policy that needs to be unique within a project. Used as {data_policy_id} in part of the resource name.
    data_policy_type DataPolicyDataPolicyType
    Type of data policy.
    location str
    policy_tag str
    Policy tag resource name, in the format of projects/{project_number}/locations/{location_id}/taxonomies/{taxonomy_id}/policyTags/{policyTag_id}.
    project str
    dataMaskingPolicy Property Map
    The data masking policy that specifies the data masking rule to use.
    dataPolicyId String
    User-assigned (human readable) ID of the data policy that needs to be unique within a project. Used as {data_policy_id} in part of the resource name.
    dataPolicyType "DATA_POLICY_TYPE_UNSPECIFIED" | "COLUMN_LEVEL_SECURITY_POLICY" | "DATA_MASKING_POLICY"
    Type of data policy.
    location String
    policyTag String
    Policy tag resource name, in the format of projects/{project_number}/locations/{location_id}/taxonomies/{taxonomy_id}/policyTags/{policyTag_id}.
    project String

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DataPolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name of this data policy, in the format of projects/{project_number}/locations/{location_id}/dataPolicies/{data_policy_id}.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name of this data policy, in the format of projects/{project_number}/locations/{location_id}/dataPolicies/{data_policy_id}.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name of this data policy, in the format of projects/{project_number}/locations/{location_id}/dataPolicies/{data_policy_id}.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Resource name of this data policy, in the format of projects/{project_number}/locations/{location_id}/dataPolicies/{data_policy_id}.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Resource name of this data policy, in the format of projects/{project_number}/locations/{location_id}/dataPolicies/{data_policy_id}.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name of this data policy, in the format of projects/{project_number}/locations/{location_id}/dataPolicies/{data_policy_id}.

    Supporting Types

    DataMaskingPolicy, DataMaskingPolicyArgs

    PredefinedExpression Pulumi.GoogleNative.BigQueryDataPolicy.V1.DataMaskingPolicyPredefinedExpression
    A predefined masking expression.
    Routine string
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.
    PredefinedExpression DataMaskingPolicyPredefinedExpression
    A predefined masking expression.
    Routine string
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.
    predefinedExpression DataMaskingPolicyPredefinedExpression
    A predefined masking expression.
    routine String
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.
    predefinedExpression DataMaskingPolicyPredefinedExpression
    A predefined masking expression.
    routine string
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.
    predefined_expression DataMaskingPolicyPredefinedExpression
    A predefined masking expression.
    routine str
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.
    predefinedExpression "PREDEFINED_EXPRESSION_UNSPECIFIED" | "SHA256" | "ALWAYS_NULL" | "DEFAULT_MASKING_VALUE" | "LAST_FOUR_CHARACTERS" | "FIRST_FOUR_CHARACTERS" | "EMAIL_MASK" | "DATE_YEAR_MASK"
    A predefined masking expression.
    routine String
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.

    DataMaskingPolicyPredefinedExpression, DataMaskingPolicyPredefinedExpressionArgs

    PredefinedExpressionUnspecified
    PREDEFINED_EXPRESSION_UNSPECIFIEDDefault, unspecified predefined expression. No masking will take place since no expression is specified.
    Sha256
    SHA256Masking expression to replace data with SHA-256 hash.
    AlwaysNull
    ALWAYS_NULLMasking expression to replace data with NULLs.
    DefaultMaskingValue
    DEFAULT_MASKING_VALUEMasking expression to replace data with their default masking values. The default masking values for each type listed as below: * STRING: "" * BYTES: b'' * INTEGER: 0 * FLOAT: 0.0 * NUMERIC: 0 * BOOLEAN: FALSE * TIMESTAMP: 1970-01-01 00:00:00 UTC * DATE: 1970-01-01 * TIME: 00:00:00 * DATETIME: 1970-01-01T00:00:00 * GEOGRAPHY: POINT(0 0) * BIGNUMERIC: 0 * ARRAY: [] * STRUCT: NOT_APPLICABLE * JSON: NULL
    LastFourCharacters
    LAST_FOUR_CHARACTERSMasking expression shows the last four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, append last four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    FirstFourCharacters
    FIRST_FOUR_CHARACTERSMasking expression shows the first four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, prepend first four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    EmailMask
    EMAIL_MASKMasking expression for email addresses. The masking behavior is as follows: * Syntax-valid email address: Replace username with XXXXX. For example, cloudysanfrancisco@gmail.com becomes XXXXX@gmail.com. * Syntax-invalid email address: Apply SHA-256 hash. For more information, see Email mask.
    DateYearMask
    DATE_YEAR_MASKMasking expression to only show the year of Date, DateTime and TimeStamp. For example, with the year 2076: * DATE : 2076-01-01 * DATETIME : 2076-01-01T00:00:00 * TIMESTAMP : 2076-01-01 00:00:00 UTC Truncation occurs according to the UTC time zone. To change this, adjust the default time zone using the time_zone system variable. For more information, see the System variables reference.
    DataMaskingPolicyPredefinedExpressionPredefinedExpressionUnspecified
    PREDEFINED_EXPRESSION_UNSPECIFIEDDefault, unspecified predefined expression. No masking will take place since no expression is specified.
    DataMaskingPolicyPredefinedExpressionSha256
    SHA256Masking expression to replace data with SHA-256 hash.
    DataMaskingPolicyPredefinedExpressionAlwaysNull
    ALWAYS_NULLMasking expression to replace data with NULLs.
    DataMaskingPolicyPredefinedExpressionDefaultMaskingValue
    DEFAULT_MASKING_VALUEMasking expression to replace data with their default masking values. The default masking values for each type listed as below: * STRING: "" * BYTES: b'' * INTEGER: 0 * FLOAT: 0.0 * NUMERIC: 0 * BOOLEAN: FALSE * TIMESTAMP: 1970-01-01 00:00:00 UTC * DATE: 1970-01-01 * TIME: 00:00:00 * DATETIME: 1970-01-01T00:00:00 * GEOGRAPHY: POINT(0 0) * BIGNUMERIC: 0 * ARRAY: [] * STRUCT: NOT_APPLICABLE * JSON: NULL
    DataMaskingPolicyPredefinedExpressionLastFourCharacters
    LAST_FOUR_CHARACTERSMasking expression shows the last four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, append last four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    DataMaskingPolicyPredefinedExpressionFirstFourCharacters
    FIRST_FOUR_CHARACTERSMasking expression shows the first four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, prepend first four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    DataMaskingPolicyPredefinedExpressionEmailMask
    EMAIL_MASKMasking expression for email addresses. The masking behavior is as follows: * Syntax-valid email address: Replace username with XXXXX. For example, cloudysanfrancisco@gmail.com becomes XXXXX@gmail.com. * Syntax-invalid email address: Apply SHA-256 hash. For more information, see Email mask.
    DataMaskingPolicyPredefinedExpressionDateYearMask
    DATE_YEAR_MASKMasking expression to only show the year of Date, DateTime and TimeStamp. For example, with the year 2076: * DATE : 2076-01-01 * DATETIME : 2076-01-01T00:00:00 * TIMESTAMP : 2076-01-01 00:00:00 UTC Truncation occurs according to the UTC time zone. To change this, adjust the default time zone using the time_zone system variable. For more information, see the System variables reference.
    PredefinedExpressionUnspecified
    PREDEFINED_EXPRESSION_UNSPECIFIEDDefault, unspecified predefined expression. No masking will take place since no expression is specified.
    Sha256
    SHA256Masking expression to replace data with SHA-256 hash.
    AlwaysNull
    ALWAYS_NULLMasking expression to replace data with NULLs.
    DefaultMaskingValue
    DEFAULT_MASKING_VALUEMasking expression to replace data with their default masking values. The default masking values for each type listed as below: * STRING: "" * BYTES: b'' * INTEGER: 0 * FLOAT: 0.0 * NUMERIC: 0 * BOOLEAN: FALSE * TIMESTAMP: 1970-01-01 00:00:00 UTC * DATE: 1970-01-01 * TIME: 00:00:00 * DATETIME: 1970-01-01T00:00:00 * GEOGRAPHY: POINT(0 0) * BIGNUMERIC: 0 * ARRAY: [] * STRUCT: NOT_APPLICABLE * JSON: NULL
    LastFourCharacters
    LAST_FOUR_CHARACTERSMasking expression shows the last four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, append last four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    FirstFourCharacters
    FIRST_FOUR_CHARACTERSMasking expression shows the first four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, prepend first four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    EmailMask
    EMAIL_MASKMasking expression for email addresses. The masking behavior is as follows: * Syntax-valid email address: Replace username with XXXXX. For example, cloudysanfrancisco@gmail.com becomes XXXXX@gmail.com. * Syntax-invalid email address: Apply SHA-256 hash. For more information, see Email mask.
    DateYearMask
    DATE_YEAR_MASKMasking expression to only show the year of Date, DateTime and TimeStamp. For example, with the year 2076: * DATE : 2076-01-01 * DATETIME : 2076-01-01T00:00:00 * TIMESTAMP : 2076-01-01 00:00:00 UTC Truncation occurs according to the UTC time zone. To change this, adjust the default time zone using the time_zone system variable. For more information, see the System variables reference.
    PredefinedExpressionUnspecified
    PREDEFINED_EXPRESSION_UNSPECIFIEDDefault, unspecified predefined expression. No masking will take place since no expression is specified.
    Sha256
    SHA256Masking expression to replace data with SHA-256 hash.
    AlwaysNull
    ALWAYS_NULLMasking expression to replace data with NULLs.
    DefaultMaskingValue
    DEFAULT_MASKING_VALUEMasking expression to replace data with their default masking values. The default masking values for each type listed as below: * STRING: "" * BYTES: b'' * INTEGER: 0 * FLOAT: 0.0 * NUMERIC: 0 * BOOLEAN: FALSE * TIMESTAMP: 1970-01-01 00:00:00 UTC * DATE: 1970-01-01 * TIME: 00:00:00 * DATETIME: 1970-01-01T00:00:00 * GEOGRAPHY: POINT(0 0) * BIGNUMERIC: 0 * ARRAY: [] * STRUCT: NOT_APPLICABLE * JSON: NULL
    LastFourCharacters
    LAST_FOUR_CHARACTERSMasking expression shows the last four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, append last four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    FirstFourCharacters
    FIRST_FOUR_CHARACTERSMasking expression shows the first four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, prepend first four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    EmailMask
    EMAIL_MASKMasking expression for email addresses. The masking behavior is as follows: * Syntax-valid email address: Replace username with XXXXX. For example, cloudysanfrancisco@gmail.com becomes XXXXX@gmail.com. * Syntax-invalid email address: Apply SHA-256 hash. For more information, see Email mask.
    DateYearMask
    DATE_YEAR_MASKMasking expression to only show the year of Date, DateTime and TimeStamp. For example, with the year 2076: * DATE : 2076-01-01 * DATETIME : 2076-01-01T00:00:00 * TIMESTAMP : 2076-01-01 00:00:00 UTC Truncation occurs according to the UTC time zone. To change this, adjust the default time zone using the time_zone system variable. For more information, see the System variables reference.
    PREDEFINED_EXPRESSION_UNSPECIFIED
    PREDEFINED_EXPRESSION_UNSPECIFIEDDefault, unspecified predefined expression. No masking will take place since no expression is specified.
    SHA256
    SHA256Masking expression to replace data with SHA-256 hash.
    ALWAYS_NULL
    ALWAYS_NULLMasking expression to replace data with NULLs.
    DEFAULT_MASKING_VALUE
    DEFAULT_MASKING_VALUEMasking expression to replace data with their default masking values. The default masking values for each type listed as below: * STRING: "" * BYTES: b'' * INTEGER: 0 * FLOAT: 0.0 * NUMERIC: 0 * BOOLEAN: FALSE * TIMESTAMP: 1970-01-01 00:00:00 UTC * DATE: 1970-01-01 * TIME: 00:00:00 * DATETIME: 1970-01-01T00:00:00 * GEOGRAPHY: POINT(0 0) * BIGNUMERIC: 0 * ARRAY: [] * STRUCT: NOT_APPLICABLE * JSON: NULL
    LAST_FOUR_CHARACTERS
    LAST_FOUR_CHARACTERSMasking expression shows the last four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, append last four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    FIRST_FOUR_CHARACTERS
    FIRST_FOUR_CHARACTERSMasking expression shows the first four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, prepend first four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    EMAIL_MASK
    EMAIL_MASKMasking expression for email addresses. The masking behavior is as follows: * Syntax-valid email address: Replace username with XXXXX. For example, cloudysanfrancisco@gmail.com becomes XXXXX@gmail.com. * Syntax-invalid email address: Apply SHA-256 hash. For more information, see Email mask.
    DATE_YEAR_MASK
    DATE_YEAR_MASKMasking expression to only show the year of Date, DateTime and TimeStamp. For example, with the year 2076: * DATE : 2076-01-01 * DATETIME : 2076-01-01T00:00:00 * TIMESTAMP : 2076-01-01 00:00:00 UTC Truncation occurs according to the UTC time zone. To change this, adjust the default time zone using the time_zone system variable. For more information, see the System variables reference.
    "PREDEFINED_EXPRESSION_UNSPECIFIED"
    PREDEFINED_EXPRESSION_UNSPECIFIEDDefault, unspecified predefined expression. No masking will take place since no expression is specified.
    "SHA256"
    SHA256Masking expression to replace data with SHA-256 hash.
    "ALWAYS_NULL"
    ALWAYS_NULLMasking expression to replace data with NULLs.
    "DEFAULT_MASKING_VALUE"
    DEFAULT_MASKING_VALUEMasking expression to replace data with their default masking values. The default masking values for each type listed as below: * STRING: "" * BYTES: b'' * INTEGER: 0 * FLOAT: 0.0 * NUMERIC: 0 * BOOLEAN: FALSE * TIMESTAMP: 1970-01-01 00:00:00 UTC * DATE: 1970-01-01 * TIME: 00:00:00 * DATETIME: 1970-01-01T00:00:00 * GEOGRAPHY: POINT(0 0) * BIGNUMERIC: 0 * ARRAY: [] * STRUCT: NOT_APPLICABLE * JSON: NULL
    "LAST_FOUR_CHARACTERS"
    LAST_FOUR_CHARACTERSMasking expression shows the last four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, append last four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    "FIRST_FOUR_CHARACTERS"
    FIRST_FOUR_CHARACTERSMasking expression shows the first four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, prepend first four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.
    "EMAIL_MASK"
    EMAIL_MASKMasking expression for email addresses. The masking behavior is as follows: * Syntax-valid email address: Replace username with XXXXX. For example, cloudysanfrancisco@gmail.com becomes XXXXX@gmail.com. * Syntax-invalid email address: Apply SHA-256 hash. For more information, see Email mask.
    "DATE_YEAR_MASK"
    DATE_YEAR_MASKMasking expression to only show the year of Date, DateTime and TimeStamp. For example, with the year 2076: * DATE : 2076-01-01 * DATETIME : 2076-01-01T00:00:00 * TIMESTAMP : 2076-01-01 00:00:00 UTC Truncation occurs according to the UTC time zone. To change this, adjust the default time zone using the time_zone system variable. For more information, see the System variables reference.

    DataMaskingPolicyResponse, DataMaskingPolicyResponseArgs

    PredefinedExpression string
    A predefined masking expression.
    Routine string
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.
    PredefinedExpression string
    A predefined masking expression.
    Routine string
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.
    predefinedExpression String
    A predefined masking expression.
    routine String
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.
    predefinedExpression string
    A predefined masking expression.
    routine string
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.
    predefined_expression str
    A predefined masking expression.
    routine str
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.
    predefinedExpression String
    A predefined masking expression.
    routine String
    The name of the BigQuery routine that contains the custom masking routine, in the format of projects/{project_number}/datasets/{dataset_id}/routines/{routine_id}.

    DataPolicyDataPolicyType, DataPolicyDataPolicyTypeArgs

    DataPolicyTypeUnspecified
    DATA_POLICY_TYPE_UNSPECIFIEDDefault value for the data policy type. This should not be used.
    ColumnLevelSecurityPolicy
    COLUMN_LEVEL_SECURITY_POLICYUsed to create a data policy for column-level security, without data masking.
    DataMaskingPolicy
    DATA_MASKING_POLICYUsed to create a data policy for data masking.
    DataPolicyDataPolicyTypeDataPolicyTypeUnspecified
    DATA_POLICY_TYPE_UNSPECIFIEDDefault value for the data policy type. This should not be used.
    DataPolicyDataPolicyTypeColumnLevelSecurityPolicy
    COLUMN_LEVEL_SECURITY_POLICYUsed to create a data policy for column-level security, without data masking.
    DataPolicyDataPolicyTypeDataMaskingPolicy
    DATA_MASKING_POLICYUsed to create a data policy for data masking.
    DataPolicyTypeUnspecified
    DATA_POLICY_TYPE_UNSPECIFIEDDefault value for the data policy type. This should not be used.
    ColumnLevelSecurityPolicy
    COLUMN_LEVEL_SECURITY_POLICYUsed to create a data policy for column-level security, without data masking.
    DataMaskingPolicy
    DATA_MASKING_POLICYUsed to create a data policy for data masking.
    DataPolicyTypeUnspecified
    DATA_POLICY_TYPE_UNSPECIFIEDDefault value for the data policy type. This should not be used.
    ColumnLevelSecurityPolicy
    COLUMN_LEVEL_SECURITY_POLICYUsed to create a data policy for column-level security, without data masking.
    DataMaskingPolicy
    DATA_MASKING_POLICYUsed to create a data policy for data masking.
    DATA_POLICY_TYPE_UNSPECIFIED
    DATA_POLICY_TYPE_UNSPECIFIEDDefault value for the data policy type. This should not be used.
    COLUMN_LEVEL_SECURITY_POLICY
    COLUMN_LEVEL_SECURITY_POLICYUsed to create a data policy for column-level security, without data masking.
    DATA_MASKING_POLICY
    DATA_MASKING_POLICYUsed to create a data policy for data masking.
    "DATA_POLICY_TYPE_UNSPECIFIED"
    DATA_POLICY_TYPE_UNSPECIFIEDDefault value for the data policy type. This should not be used.
    "COLUMN_LEVEL_SECURITY_POLICY"
    COLUMN_LEVEL_SECURITY_POLICYUsed to create a data policy for column-level security, without data masking.
    "DATA_MASKING_POLICY"
    DATA_MASKING_POLICYUsed to create a data policy for data masking.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
    pulumi/pulumi-google-native