google-cloud-dlp

Can we save wrapped keys generated with cloud KMS keys in DLP deidentification templates(using Python Api)?

空扰寡人 提交于 2021-01-23 06:54:22
问题 I am working on a PII de-identification project and using google cloud's data loss prevention api. Use case: To encrypt a field with cloud KMS key. Created a dlp-deidentification template, here is the snippet: { "deidentify_template":{ "display_name":"deidentification_encryption", "description":"deidentification_encryption", "deidentify_config":{ "record_transformations":{ "field_transformations":[ { "fields":[ { "name":"password" } ], "primitive_transformation":{ "crypto_hash_config": {

Can we save wrapped keys generated with cloud KMS keys in DLP deidentification templates(using Python Api)?

不问归期 提交于 2021-01-23 06:54:07
问题 I am working on a PII de-identification project and using google cloud's data loss prevention api. Use case: To encrypt a field with cloud KMS key. Created a dlp-deidentification template, here is the snippet: { "deidentify_template":{ "display_name":"deidentification_encryption", "description":"deidentification_encryption", "deidentify_config":{ "record_transformations":{ "field_transformations":[ { "fields":[ { "name":"password" } ], "primitive_transformation":{ "crypto_hash_config": {

Can we save wrapped keys generated with cloud KMS keys in DLP deidentification templates(using Python Api)?

坚强是说给别人听的谎言 提交于 2021-01-23 06:53:23
问题 I am working on a PII de-identification project and using google cloud's data loss prevention api. Use case: To encrypt a field with cloud KMS key. Created a dlp-deidentification template, here is the snippet: { "deidentify_template":{ "display_name":"deidentification_encryption", "description":"deidentification_encryption", "deidentify_config":{ "record_transformations":{ "field_transformations":[ { "fields":[ { "name":"password" } ], "primitive_transformation":{ "crypto_hash_config": {

GCP DLP(Data Loss prevention) getting “Decryption failed: the ciphertext is invalid.”

久未见 提交于 2020-12-15 06:21:08
问题 I am implementing the standard implementation of Google Cloud Platforms- Data Loss Prevention API in Python for De-Identifying text. This is from the example in https://github.com/GoogleCloudPlatform/python-docs-samples/blob/master/dlp/deid.py for the method deidentify_with_fpe When I run the code with the parameters I mentioned below I am getting the following error. Can someone suggest how to fix the error? google.api_core.exceptions.InvalidArgument: 400 Received the following error message

How to scan BigQuery table with DLP looking for sensitive data?

倾然丶 夕夏残阳落幕 提交于 2019-12-21 05:36:40
问题 I would like to analyze my tables in BigQuery using DLP . It is possible ? How to do that ? 回答1: It's possible. You need to define your storage_config to use BigQuery. If you want to save findings in another table, then add a save_findings action to the job config. Without actions you will only have access to the job's finding summary via the projects.dlpJobs.get method. Follow the example in python to invoke DLP to scan BigQuery: client_dlp = dlp_v2.DlpServiceClient.from_service_account_json