--- title: "POST /v2/{+parent}/discoveryConfigs" method: POST path: "/v2/{+parent}/discoveryConfigs" tags: ["organizations"] --- # POST /v2/{+parent}/discoveryConfigs `POST /v2/{+parent}/discoveryConfigs` Creates a config for discovery to scan and profile storage. ## Path parameters - `parent` string, required ## Request body - GooglePrivacyDlpV2CreateDiscoveryConfigRequest — Request message for CreateDiscoveryConfig. - `discoveryConfig` GooglePrivacyDlpV2DiscoveryConfig — Configuration for discovery to scan resources for profile generation. Only one discovery configuration may exist per organization, folder, or project. The generated data profiles are retained according to the [data retention policy] (https://cloud.google.com/sensitive-data-protection/docs/data-profiles#retention). - `name` string — Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created, for example `projects/dlp-test-project/locations/global/discoveryConfigs/53234423`. - `updateTime` string, google-datetime — Output only. The last update timestamp of a DiscoveryConfig. - `processingLocation` GooglePrivacyDlpV2ProcessingLocation — Configure processing location for discovery and inspection. For example, image OCR is only provided in limited regions but configuring ProcessingLocation will redirect OCR to a location where OCR is provided. - `documentFallbackLocation` GooglePrivacyDlpV2DocumentFallbackLocation — Configure document processing to fall back to any of the following processing options if document processing is unavailable in the original request location. - `multiRegionProcessing` GooglePrivacyDlpV2MultiRegionProcessing — Processing occurs in a multi-region that contains the current region if available. - `globalProcessing` GooglePrivacyDlpV2GlobalProcessing — Processing occurs in the global region. - `imageFallbackLocation` GooglePrivacyDlpV2ImageFallbackLocation — Configure image processing to fall back to any of the following processing options if image processing is unavailable in the original request location. - `multiRegionProcessing` GooglePrivacyDlpV2MultiRegionProcessing — Processing occurs in a multi-region that contains the current region if available. - `globalProcessing` GooglePrivacyDlpV2GlobalProcessing — Processing occurs in the global region. - `status` 'STATUS_UNSPECIFIED' | 'RUNNING' | 'PAUSED' — Required. A status for this configuration. - `targets` GooglePrivacyDlpV2DiscoveryTarget[] — Target to match against for determining what to scan and how frequently. - `bigQueryTarget` GooglePrivacyDlpV2BigQueryDiscoveryTarget — Target used to match against for discovery with BigQuery tables - `disabled` GooglePrivacyDlpV2Disabled — Do not profile the tables. - `filter` GooglePrivacyDlpV2DiscoveryBigQueryFilter — Determines what tables will have profiles generated within an organization or project. Includes the ability to filter by regular expression patterns on project ID, dataset ID, and table ID. - `tables` GooglePrivacyDlpV2BigQueryTableCollection — Specifies a collection of BigQuery tables. Used for Discovery. - `includeRegexes` GooglePrivacyDlpV2BigQueryRegexes — A collection of regular expressions to determine what tables to match against. - … - `otherTables` GooglePrivacyDlpV2AllOtherBigQueryTables — Catch-all for all other tables not specified by other filters. Should always be last, except for single-table configurations, which will only have a TableReference target. - `tableReference` GooglePrivacyDlpV2TableReference — Message defining the location of a BigQuery table with the projectId inferred from the parent project. - `datasetId` string — Dataset ID of the table. - `tableId` string — Name of the table. - `projectId` string — The Google Cloud project ID of the project containing the table. If omitted, the project ID is inferred from the parent project. This field is required if the parent resource is an organization. - `conditions` GooglePrivacyDlpV2DiscoveryBigQueryConditions — Requirements that must be true before a table is scanned in discovery for the first time. There is an AND relationship between the top-level attributes. Additionally, minimum conditions with an OR relationship that must be met before Cloud DLP scans a table can be set (like a minimum row count or a minimum table age). - `types` GooglePrivacyDlpV2BigQueryTableTypes — The types of BigQuery tables supported by Cloud DLP. - `types` string[] — A set of BigQuery table types. - `orConditions` GooglePrivacyDlpV2OrConditions — There is an OR relationship between these attributes. They are used to determine if a table should be scanned or not in Discovery. - `minAge` string, google-duration — Minimum age a table must have before Cloud DLP can profile it. Value must be 1 hour or greater. - `minRowCount` integer — Minimum number of rows that should be present before Cloud DLP profiles a table - `createdAfter` string, google-datetime — BigQuery table must have been created after this date. Used to avoid backfilling. - `typeCollection` 'BIG_QUERY_COLLECTION_UNSPECIFIED' | 'BIG_QUERY_COLLECTION_ALL_TYPES' | 'BIG_QUERY_COLLECTION_ONLY_SUPPORTED_TYPES' — Restrict discovery to categories of table types. - `cadence` GooglePrivacyDlpV2DiscoveryGenerationCadence — What must take place for a profile to be updated and how frequently it should occur. New tables are scanned as quickly as possible depending on system capacity. - `refreshFrequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — Frequency at which profiles should be updated, regardless of whether the underlying resource has changed. Defaults to never. - `schemaModifiedCadence` GooglePrivacyDlpV2DiscoverySchemaModifiedCadence — The cadence at which to update data profiles when a schema is modified. - `frequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — How frequently profiles may be updated when schemas are modified. Defaults to monthly. - `types` string[] — The type of events to consider when deciding if the table's schema has been modified and should have the profile updated. Defaults to NEW_COLUMNS. - `tableModifiedCadence` GooglePrivacyDlpV2DiscoveryTableModifiedCadence — The cadence at which to update data profiles when a table is modified. - `types` string[] — The type of events to consider when deciding if the table has been modified and should have the profile updated. Defaults to MODIFIED_TIMESTAMP. - `frequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — How frequently data profiles can be updated when tables are modified. Defaults to never. - `inspectTemplateModifiedCadence` GooglePrivacyDlpV2DiscoveryInspectTemplateModifiedCadence — The cadence at which to update data profiles when the inspection rules defined by the `InspectTemplate` change. - `frequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — How frequently data profiles can be updated when the template is modified. Defaults to never. - `cloudSqlTarget` GooglePrivacyDlpV2CloudSqlDiscoveryTarget — Target used to match against for discovery with Cloud SQL tables. - `conditions` GooglePrivacyDlpV2DiscoveryCloudSqlConditions — Requirements that must be true before a table is profiled for the first time. - `databaseEngines` string[] — Optional. Database engines that should be profiled. Optional. Defaults to ALL_SUPPORTED_DATABASE_ENGINES if unspecified. - `types` string[] — Data profiles will only be generated for the database resource types specified in this field. If not specified, defaults to [DATABASE_RESOURCE_TYPE_ALL_SUPPORTED_TYPES]. - `filter` GooglePrivacyDlpV2DiscoveryCloudSqlFilter — Determines what tables will have profiles generated within an organization or project. Includes the ability to filter by regular expression patterns on project ID, location, instance, database, and database resource name. - `databaseResourceReference` GooglePrivacyDlpV2DatabaseResourceReference — Identifies a single database resource, like a table within a database. - `database` string — Required. Name of a database within the instance. - `instance` string — Required. The instance where this resource is located. For example: Cloud SQL instance ID. - `projectId` string — Required. If within a project-level config, then this must match the config's project ID. - `databaseResource` string — Required. Name of a database resource, for example, a table within the database. - `collection` GooglePrivacyDlpV2DatabaseResourceCollection — Match database resources using regex filters. Examples of database resources are tables, views, and stored procedures. - `includeRegexes` GooglePrivacyDlpV2DatabaseResourceRegexes — A collection of regular expressions to determine what database resources to match against. - … - `others` GooglePrivacyDlpV2AllOtherDatabaseResources — Match database resources not covered by any other filter. - `generationCadence` GooglePrivacyDlpV2DiscoveryCloudSqlGenerationCadence — How often existing tables should have their profiles refreshed. New tables are scanned as quickly as possible depending on system capacity. - `refreshFrequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — Data changes (non-schema changes) in Cloud SQL tables can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying tables have changed. Defaults to never. - `inspectTemplateModifiedCadence` GooglePrivacyDlpV2DiscoveryInspectTemplateModifiedCadence — The cadence at which to update data profiles when the inspection rules defined by the `InspectTemplate` change. - `frequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — How frequently data profiles can be updated when the template is modified. Defaults to never. - `schemaModifiedCadence` GooglePrivacyDlpV2SchemaModifiedCadence — How frequently to modify the profile when the table's schema is modified. - `types` string[] — The types of schema modifications to consider. Defaults to NEW_COLUMNS. - `frequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — Frequency to regenerate data profiles when the schema is modified. Defaults to monthly. - `disabled` GooglePrivacyDlpV2Disabled — Do not profile the tables. - `otherCloudTarget` GooglePrivacyDlpV2OtherCloudDiscoveryTarget — Target used to match against for discovery of resources from other clouds. An [AWS connector in Security Command Center (Enterprise](https://cloud.google.com/security-command-center/docs/connect-scc-to-aws) is required to use this feature. - `generationCadence` GooglePrivacyDlpV2DiscoveryOtherCloudGenerationCadence — How often existing resources should have their profiles refreshed. New resources are scanned as quickly as possible depending on system capacity. - `inspectTemplateModifiedCadence` GooglePrivacyDlpV2DiscoveryInspectTemplateModifiedCadence — The cadence at which to update data profiles when the inspection rules defined by the `InspectTemplate` change. - `frequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — How frequently data profiles can be updated when the template is modified. Defaults to never. - `refreshFrequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — Optional. Frequency to update profiles regardless of whether the underlying resource has changes. Defaults to never. - `dataSourceType` GooglePrivacyDlpV2DataSourceType — Message used to identify the type of resource being profiled. - `dataSource` string — A string that identifies the type of resource being profiled. Current values: * google/bigquery/table * google/project * google/sql/table * google/gcs/bucket - `conditions` GooglePrivacyDlpV2DiscoveryOtherCloudConditions — Requirements that must be true before a resource is profiled for the first time. - `minAge` string, google-duration — Minimum age a resource must be before Cloud DLP can profile it. Value must be 1 hour or greater. - `amazonS3BucketConditions` GooglePrivacyDlpV2AmazonS3BucketConditions — Amazon S3 bucket conditions. - `objectStorageClasses` string[] — Optional. Object classes that should be profiled. Optional. Defaults to ALL_SUPPORTED_CLASSES if unspecified. - `bucketTypes` string[] — Optional. Bucket types that should be profiled. Optional. Defaults to TYPE_ALL_SUPPORTED if unspecified. - `disabled` GooglePrivacyDlpV2Disabled — Do not profile the tables. - `filter` GooglePrivacyDlpV2DiscoveryOtherCloudFilter — Determines which resources from the other cloud will have profiles generated. Includes the ability to filter by resource names. - `collection` GooglePrivacyDlpV2OtherCloudResourceCollection — Match resources using regex filters. - `includeRegexes` GooglePrivacyDlpV2OtherCloudResourceRegexes — A collection of regular expressions to determine what resources to match against. - … - `others` GooglePrivacyDlpV2AllOtherResources — Match discovery resources not covered by any other filter. - `singleResource` GooglePrivacyDlpV2OtherCloudSingleResourceReference — Identifies a single resource, like a single Amazon S3 bucket. - `amazonS3Bucket` GooglePrivacyDlpV2AmazonS3Bucket — Amazon S3 bucket. - … - `cloudStorageTarget` GooglePrivacyDlpV2CloudStorageDiscoveryTarget — Target used to match against for discovery with Cloud Storage buckets. - `filter` GooglePrivacyDlpV2DiscoveryCloudStorageFilter — Determines which buckets will have profiles generated within an organization or project. Includes the ability to filter by regular expression patterns on project ID and bucket name. - `collection` GooglePrivacyDlpV2FileStoreCollection — Match file stores (e.g. buckets) using filters. - `includeRegexes` GooglePrivacyDlpV2FileStoreRegexes — A collection of regular expressions to determine what file store to match against. - … - `includeTags` GooglePrivacyDlpV2TagFilters — Tags to match against for filtering. - … - `cloudStorageResourceReference` GooglePrivacyDlpV2CloudStorageResourceReference — Identifies a single Cloud Storage bucket. - `projectId` string — Required. If within a project-level config, then this must match the config's project id. - `bucketName` string — Required. The bucket to scan. - `others` GooglePrivacyDlpV2AllOtherResources — Match discovery resources not covered by any other filter. - `generationCadence` GooglePrivacyDlpV2DiscoveryCloudStorageGenerationCadence — How often existing buckets should have their profiles refreshed. New buckets are scanned as quickly as possible depending on system capacity. - `inspectTemplateModifiedCadence` GooglePrivacyDlpV2DiscoveryInspectTemplateModifiedCadence — The cadence at which to update data profiles when the inspection rules defined by the `InspectTemplate` change. - `frequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — How frequently data profiles can be updated when the template is modified. Defaults to never. - `refreshFrequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — Optional. Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changed. Defaults to never. - `disabled` GooglePrivacyDlpV2Disabled — Do not profile the tables. - `conditions` GooglePrivacyDlpV2DiscoveryFileStoreConditions — Requirements that must be true before a file store is scanned in discovery for the first time. There is an AND relationship between the top-level attributes. - `createdAfter` string, google-datetime — Optional. File store must have been created after this date. Used to avoid backfilling. - `minAge` string, google-duration — Optional. Minimum age a file store must have. If set, the value must be 1 hour or greater. - `cloudStorageConditions` GooglePrivacyDlpV2DiscoveryCloudStorageConditions — Requirements that must be true before a Cloud Storage bucket or object is scanned in discovery for the first time. There is an AND relationship between the top-level attributes. - `includedObjectAttributes` string[] — Required. Only objects with the specified attributes will be scanned. If an object has one of the specified attributes but is inside an excluded bucket, it will not be scanned. Defaults to [ALL_SUPPORTED_OBJECTS]. A profile will be created even if no objects match the included_object_attributes. - `includedBucketAttributes` string[] — Required. Only objects with the specified attributes will be scanned. Defaults to [ALL_SUPPORTED_BUCKETS] if unset. - `secretsTarget` GooglePrivacyDlpV2SecretsDiscoveryTarget — Discovery target for credentials and secrets in cloud resource metadata. This target does not include any filtering or frequency controls. Cloud DLP will scan cloud resource metadata for secrets daily. No inspect template should be included in the discovery config for a security benchmarks scan. Instead, the built-in list of secrets and credentials infoTypes will be used (see https://cloud.google.com/sensitive-data-protection/docs/infotypes-reference#credentials_and_secrets). Credentials and secrets discovered will be reported as vulnerabilities to Security Command Center. - `vertexDatasetTarget` GooglePrivacyDlpV2VertexDatasetDiscoveryTarget — Target used to match against for discovery with Vertex AI datasets. - `conditions` GooglePrivacyDlpV2DiscoveryVertexDatasetConditions — Requirements that must be true before a dataset is profiled for the first time. - `createdAfter` string, google-datetime — Vertex AI dataset must have been created after this date. Used to avoid backfilling. - `minAge` string, google-duration — Minimum age a Vertex AI dataset must have. If set, the value must be 1 hour or greater. - `filter` GooglePrivacyDlpV2DiscoveryVertexDatasetFilter — Determines what datasets will have profiles generated within an organization or project. Includes the ability to filter by regular expression patterns on project ID or dataset regex. - `vertexDatasetResourceReference` GooglePrivacyDlpV2VertexDatasetResourceReference — Identifies a single Vertex AI resource. Only datasets are supported. - `datasetResourceName` string — Required. The name of the Vertex AI resource. If set within a project-level configuration, the specified resource must be within the project. Examples: * `projects/{project}/locations/{location}/datasets/{dataset}` - `collection` GooglePrivacyDlpV2VertexDatasetCollection — Match dataset resources using regex filters. - `vertexDatasetRegexes` GooglePrivacyDlpV2VertexDatasetRegexes — A collection of regular expressions to determine what datasets to match against. - … - `others` GooglePrivacyDlpV2AllOtherResources — Match discovery resources not covered by any other filter. - `generationCadence` GooglePrivacyDlpV2DiscoveryVertexDatasetGenerationCadence — How often existing datasets should have their profiles refreshed. New datasets are scanned as quickly as possible depending on system capacity. - `refreshFrequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — If you set this field, profiles are refreshed at this frequency regardless of whether the underlying datasets have changed. Defaults to never. - `inspectTemplateModifiedCadence` GooglePrivacyDlpV2DiscoveryInspectTemplateModifiedCadence — The cadence at which to update data profiles when the inspection rules defined by the `InspectTemplate` change. - `frequency` 'UPDATE_FREQUENCY_UNSPECIFIED' | 'UPDATE_FREQUENCY_NEVER' | 'UPDATE_FREQUENCY_DAILY' | 'UPDATE_FREQUENCY_MONTHLY' — How frequently data profiles can be updated when the template is modified. Defaults to never. - `disabled` GooglePrivacyDlpV2Disabled — Do not profile the tables. - `createTime` string, google-datetime — Output only. The creation timestamp of a DiscoveryConfig. - `actions` GooglePrivacyDlpV2DataProfileAction[] — Actions to execute at the completion of scanning. - `publishToChronicle` GooglePrivacyDlpV2PublishToChronicle — Message expressing intention to publish to Google Security Operations. - `pubSubNotification` GooglePrivacyDlpV2PubSubNotification — Send a Pub/Sub message into the given Pub/Sub topic to connect other systems to data profile generation. The message payload data will be the byte serialization of `DataProfilePubSubMessage`. - `event` 'EVENT_TYPE_UNSPECIFIED' | 'NEW_PROFILE' | 'CHANGED_PROFILE' | 'SCORE_INCREASED' | 'ERROR_CHANGED' — The type of event that triggers a Pub/Sub. At most one `PubSubNotification` per EventType is permitted. - `pubsubCondition` GooglePrivacyDlpV2DataProfilePubSubCondition — A condition for determining whether a Pub/Sub should be triggered. - `expressions` GooglePrivacyDlpV2PubSubExpressions — An expression, consisting of an operator and conditions. - `logicalOperator` 'LOGICAL_OPERATOR_UNSPECIFIED' | 'OR' | 'AND' — The operator to apply to the collection of conditions. - `conditions` GooglePrivacyDlpV2PubSubCondition[] — Conditions to apply to the expression. - … - `topic` string — Cloud Pub/Sub topic to send notifications to. Format is projects/{project}/topics/{topic}. - `detailOfMessage` 'DETAIL_LEVEL_UNSPECIFIED' | 'TABLE_PROFILE' | 'RESOURCE_NAME' | 'FILE_STORE_PROFILE' — How much data to include in the Pub/Sub message. If the user wishes to limit the size of the message, they can use resource_name and fetch the profile fields they wish to. Per table profile (not per column). - `exportData` GooglePrivacyDlpV2Export — If set, the detailed data profiles will be persisted to the location of your choice whenever updated. - `profileTable` GooglePrivacyDlpV2BigQueryTable — Message defining the location of a BigQuery table. A table is uniquely identified by its project_id, dataset_id, and table_name. Within a query a table is often referenced with a string in the format of: `:.` or `..`. - `projectId` string — The Google Cloud project ID of the project containing the table. If omitted, project ID is inferred from the API call. - `datasetId` string — Dataset ID of the table. - `tableId` string — Name of the table. - `sampleFindingsTable` GooglePrivacyDlpV2BigQueryTable — Message defining the location of a BigQuery table. A table is uniquely identified by its project_id, dataset_id, and table_name. Within a query a table is often referenced with a string in the format of: `:.` or `..`. - `projectId` string — The Google Cloud project ID of the project containing the table. If omitted, project ID is inferred from the API call. - `datasetId` string — Dataset ID of the table. - `tableId` string — Name of the table. - `publishToScc` GooglePrivacyDlpV2PublishToSecurityCommandCenter — If set, a summary finding will be created or updated in Security Command Center for each profile. - `tagResources` GooglePrivacyDlpV2TagResources — If set, attaches the [tags] (https://cloud.google.com/resource-manager/docs/tags/tags-overview) provided to profiled resources. Tags support [access control](https://cloud.google.com/iam/docs/tags-access-control). You can conditionally grant or deny access to a resource based on whether the resource has a specific tag. - `tagConditions` GooglePrivacyDlpV2TagCondition[] — The tags to associate with different conditions. - `tag` GooglePrivacyDlpV2TagValue — A value of a tag. - `namespacedValue` string — The namespaced name for the tag value to attach to resources. Must be in the format `{parent_id}/{tag_key_short_name}/{short_name}`, for example, "123456/environment/prod" for an organization parent, or "my-project/environment/prod" for a project parent. - `sensitivityScore` GooglePrivacyDlpV2SensitivityScore — Score is calculated from of all elements in the data profile. A higher level means the data is more sensitive. - `score` 'SENSITIVITY_SCORE_UNSPECIFIED' | 'SENSITIVITY_LOW' | 'SENSITIVITY_UNKNOWN' | 'SENSITIVITY_MODERATE' | 'SENSITIVITY_HIGH' — The sensitivity score applied to the resource. - `profileGenerationsToTag` string[] — The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include both `PROFILE_GENERATION_NEW` and `PROFILE_GENERATION_UPDATE`. - `lowerDataRiskToLow` boolean — Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an [IAM deny policy](https://cloud.google.com/iam/docs/deny-overview), you can deny all principals a permission if a tag value is present, mitigating the risk of the resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles. - `publishToDataplexCatalog` GooglePrivacyDlpV2PublishToDataplexCatalog — Create Dataplex Universal Catalog aspects for profiled resources with the aspect type Sensitive Data Protection Profile. To learn more about aspects, see https://cloud.google.com/sensitive-data-protection/docs/add-aspects. - `lowerDataRiskToLow` boolean — Whether creating a Dataplex Universal Catalog aspect for a profiled resource should lower the risk of the profile for that resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles. - `inspectTemplates` string[] — Detection logic for profile generation. Not all template features are used by Discovery. FindingLimits, include_quote and exclude_info_types have no impact on Discovery. Multiple templates may be provided if there is data in multiple regions. At most one template must be specified per-region (including "global"). Each region is scanned using the applicable template. If no region-specific template is specified, but a "global" template is specified, it will be copied to that region and used instead. If no global or region-specific template is provided for a region with data, that region's data will not be scanned. For more information, see https://cloud.google.com/sensitive-data-protection/docs/data-profiles#data-residency. - `errors` GooglePrivacyDlpV2Error[] — Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared. - `timestamps` string[] — The times the error occurred. List includes the oldest timestamp and the last 9 timestamps. - `details` GoogleRpcStatus — The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). - `code` integer — The status code, which should be an enum value of google.rpc.Code. - `message` string — A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client. - `details` object[] — A list of messages that carry the error details. There is a common set of message types for APIs to use. - `extraInfo` 'ERROR_INFO_UNSPECIFIED' | 'IMAGE_SCAN_UNAVAILABLE_IN_REGION' | 'FILE_STORE_CLUSTER_UNSUPPORTED' — Additional information about the error. - `otherCloudStartingLocation` GooglePrivacyDlpV2OtherCloudDiscoveryStartingLocation — The other cloud starting location for discovery. - `awsLocation` GooglePrivacyDlpV2AwsDiscoveryStartingLocation — The AWS starting location for discovery. - `accountId` string — The AWS account ID that this discovery config applies to. Within an AWS organization, you can find the AWS account ID inside an AWS account ARN. Example: arn:{partition}:organizations::{management_account_id}:account/{org_id}/{account_id} - `allAssetInventoryAssets` boolean — All AWS assets stored in Asset Inventory that didn't match other AWS discovery configs. - `orgConfig` GooglePrivacyDlpV2OrgConfig — Project and scan location information. Only set when the parent is an org. - `location` GooglePrivacyDlpV2DiscoveryStartingLocation — The location to begin a discovery scan. Denotes an organization ID or folder ID within an organization. - `organizationId` string, int64 — The ID of an organization to scan. - `folderId` string, int64 — The ID of the folder within an organization to be scanned. - `projectId` string — The project that will run the scan. The DLP service account that exists within this project must have access to all resources that are profiled, and the DLP API must be enabled. - `displayName` string — Display name (max 100 chars) - `lastRunTime` string, google-datetime — Output only. The timestamp of the last time this config was executed. - `configId` string — The config ID can contain uppercase and lowercase letters, numbers, and hyphens; that is, it must match the regular expression: `[a-zA-Z\d-_]+`. The maximum length is 100 characters. Can be empty to allow the system to generate one. ## Response `200` Successful response --- [API](https://skmtc.net/google/apis/dlp.md) · [All operations](https://skmtc.net/google/apis/dlp/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/dlp/versions/98ced13f7159/schema)