Dukungan peraturan di AlloyDB untuk PostgreSQL

Dokumen ini menjelaskan fitur, konfigurasi, dan API di AlloyDB untuk PostgreSQL yang selaras dengan kontrol untuk paket kontrol yang didukung. Dokumen ini mengasumsikan bahwa Anda menggunakan Assured Workloads.

Batas Data untuk ITAR

Layanan yang didukung

Tabel berikut mencantumkan API dan versi AlloyDB untuk PostgreSQL yang memenuhi persyaratan Batas Data untuk ITAR.

Layanan Versi Status
alloydb.googleapis.com v1 DIDUKUNG
alloydb.googleapis.com v1alpha DIDUKUNG
alloydb.googleapis.com v1beta DIDUKUNG

Wilayah yang didukung kepatuhan

AlloyDB untuk PostgreSQL tersedia untuk Batas Data untuk ITAR di region Google Cloud berikut:

  • us-central1
  • us-east1
  • us-east4
  • us-east5
  • us-south1
  • us-west1
  • us-west2
  • us-west3
  • us-west4

Kolom API untuk data sensitif

Resource: alloydb.googleapis.com/Cluster

Tabel berikut menentukan resource dan kolom API yang dirancang untuk menangani data yang dilindungi berdasarkan Batasan Data untuk ITAR.

Metode API Kolom yang dilindungi

Layanan: alloydb.googleapis.com

REST API: PATCH /v1/{cluster.name=projects/*/locations/*/clusters/*}

Metode RPC:

  • google.cloud.alloydb.v1.AlloyDBAdmin.UpdateCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: PATCH /v1alpha/{cluster.name=projects/*/locations/*/clusters/*}

Metode RPC:

  • google.cloud.alloydb.v1alpha.AlloyDBAdmin.UpdateCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: PATCH /v1beta/{cluster.name=projects/*/locations/*/clusters/*}

Metode RPC:

  • google.cloud.alloydb.v1beta.AlloyDBAdmin.UpdateCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1/{name=projects/*/locations/*/clusters/*}:import

Metode RPC:

  • google.cloud.alloydb.v1.AlloyDBAdmin.ImportCluster
  • password

Layanan: alloydb.googleapis.com

REST API: POST /v1/{parent=projects/*/locations/*}/clusters

Metode RPC:

  • google.cloud.alloydb.v1.AlloyDBAdmin.CreateCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1/{parent=projects/*/locations/*}/clusters:createsecondary

Metode RPC:

  • google.cloud.alloydb.v1.AlloyDBAdmin.CreateSecondaryCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1/{parent=projects/*/locations/*}/clusters:restore

Metode RPC:

  • google.cloud.alloydb.v1.AlloyDBAdmin.RestoreCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1/{parent=projects/*/locations/*}/clusters:restoreFromCloudSQL

Metode RPC:

  • google.cloud.alloydb.v1.AlloyDBCSQLAdmin.RestoreFromCloudSQL
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1alpha/{name=projects/*/locations/*/clusters/*}:import

Metode RPC:

  • google.cloud.alloydb.v1alpha.AlloyDBAdmin.ImportCluster
  • password

Layanan: alloydb.googleapis.com

REST API: POST /v1alpha/{parent=projects/*/locations/*}/clusters

Metode RPC:

  • google.cloud.alloydb.v1alpha.AlloyDBAdmin.CreateCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1alpha/{parent=projects/*/locations/*}/clusters:createsecondary

Metode RPC:

  • google.cloud.alloydb.v1alpha.AlloyDBAdmin.CreateSecondaryCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1alpha/{parent=projects/*/locations/*}/clusters:restore

Metode RPC:

  • google.cloud.alloydb.v1alpha.AlloyDBAdmin.RestoreCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1alpha/{parent=projects/*/locations/*}/clusters:restoreFromCloudSQL

Metode RPC:

  • google.cloud.alloydb.v1alpha.AlloyDBCSQLAdmin.RestoreFromCloudSQL
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1beta/{name=projects/*/locations/*/clusters/*}:import

Metode RPC:

  • google.cloud.alloydb.v1beta.AlloyDBAdmin.ImportCluster
  • password

Layanan: alloydb.googleapis.com

REST API: POST /v1beta/{parent=projects/*/locations/*}/clusters

Metode RPC:

  • google.cloud.alloydb.v1beta.AlloyDBAdmin.CreateCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1beta/{parent=projects/*/locations/*}/clusters:createsecondary

Metode RPC:

  • google.cloud.alloydb.v1beta.AlloyDBAdmin.CreateSecondaryCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1beta/{parent=projects/*/locations/*}/clusters:restore

Metode RPC:

  • google.cloud.alloydb.v1beta.AlloyDBAdmin.RestoreCluster
  • cluster.initialUser.password
  • cluster.initialUser.user

Layanan: alloydb.googleapis.com

REST API: POST /v1beta/{parent=projects/*/locations/*}/clusters:restoreFromCloudSQL

Metode RPC:

  • google.cloud.alloydb.v1beta.AlloyDBCSQLAdmin.RestoreFromCloudSQL
  • cluster.initialUser.password
  • cluster.initialUser.user

Resource: alloydb.googleapis.com/Instance

Tabel berikut menentukan resource dan kolom API yang dirancang untuk menangani data yang dilindungi berdasarkan Batasan Data untuk ITAR.

Metode API Kolom yang dilindungi

Layanan: alloydb.googleapis.com

REST API: POST /v1/{instance=projects/*/locations/*/clusters/*/instances/*}:executeSql

Metode RPC:

  • google.cloud.alloydb.v1.AlloyDBAdmin.ExecuteSql
  • password
  • sqlStatement

Layanan: alloydb.googleapis.com

REST API: POST /v1/{instance=projects/*/locations/*/clusters/*/instances/*}:executeSqlReadOnly

Metode RPC:

  • google.cloud.alloydb.v1.AlloyDBAdmin.ExecuteSqlReadOnly
  • password
  • sqlStatement

Layanan: alloydb.googleapis.com

REST API: POST /v1alpha/{instance=projects/*/locations/*/clusters/*/instances/*}:executeSql

Metode RPC:

  • google.cloud.alloydb.v1alpha.AlloyDBAdmin.ExecuteSql
  • password
  • sqlStatement

Layanan: alloydb.googleapis.com

REST API: POST /v1alpha/{instance=projects/*/locations/*/clusters/*/instances/*}:executeSqlReadOnly

Metode RPC:

  • google.cloud.alloydb.v1alpha.AlloyDBAdmin.ExecuteSqlReadOnly
  • password
  • sqlStatement

Layanan: alloydb.googleapis.com

REST API: POST /v1beta/{instance=projects/*/locations/*/clusters/*/instances/*}:executeSql

Metode RPC:

  • google.cloud.alloydb.v1beta.AlloyDBAdmin.ExecuteSql
  • password
  • sqlStatement

Layanan: alloydb.googleapis.com

REST API: POST /v1beta/{instance=projects/*/locations/*/clusters/*/instances/*}:executeSqlReadOnly

Metode RPC:

  • google.cloud.alloydb.v1beta.AlloyDBAdmin.ExecuteSqlReadOnly
  • password
  • sqlStatement

Resource: alloydb.googleapis.com/User

Tabel berikut menentukan resource dan kolom API yang dirancang untuk menangani data yang dilindungi berdasarkan Batasan Data untuk ITAR.

Metode API Kolom yang dilindungi

Layanan: alloydb.googleapis.com

REST API: PATCH /v1/{user.name=projects/*/locations/*/clusters/*/users/*}

Metode RPC:

  • google.cloud.alloydb.v1.AlloyDBAdmin.UpdateUser
  • user.password

Layanan: alloydb.googleapis.com

REST API: PATCH /v1alpha/{user.name=projects/*/locations/*/clusters/*/users/*}

Metode RPC:

  • google.cloud.alloydb.v1alpha.AlloyDBAdmin.UpdateUser
  • user.password

Layanan: alloydb.googleapis.com

REST API: PATCH /v1beta/{user.name=projects/*/locations/*/clusters/*/users/*}

Metode RPC:

  • google.cloud.alloydb.v1beta.AlloyDBAdmin.UpdateUser
  • user.password

Layanan: alloydb.googleapis.com

REST API: POST /v1/{parent=projects/*/locations/*/clusters/*}/users

Metode RPC:

  • google.cloud.alloydb.v1.AlloyDBAdmin.CreateUser
  • user.password

Layanan: alloydb.googleapis.com

REST API: POST /v1alpha/{parent=projects/*/locations/*/clusters/*}/users

Metode RPC:

  • google.cloud.alloydb.v1alpha.AlloyDBAdmin.CreateUser
  • user.password

Layanan: alloydb.googleapis.com

REST API: POST /v1beta/{parent=projects/*/locations/*/clusters/*}/users

Metode RPC:

  • google.cloud.alloydb.v1beta.AlloyDBAdmin.CreateUser
  • user.password

Kolom yang tidak ditujukan untuk Data sensitif

Tabel berikut memberikan daftar ilustratif kategori kolom dan kolom tertentu yang tidak cocok untuk informasi sensitif. Untuk menjaga kepatuhan, hindari menempatkan data yang dilindungi di kolom ini. Untuk mengetahui daftar lengkapnya, hubungi perwakilan Google Cloud Anda.

Kategori Kolom
Autentikasi dan kredensial
  • cloudSqlSource.authConfig.usernamePassword.username
  • pemCsr
  • publicKey
Konfigurasi pencadangan
  • backup.clusterName
  • backup.description
  • backup.displayName
  • backup.encryptionConfig.kmsKeyName
  • backup.tags.key
  • backup.tags.value
Konfigurasi cluster
  • cluster.automatedBackupPolicy.location
  • cluster.displayName
  • cluster.encryptionConfig.kmsKeyName
  • cluster.maintenanceVersionName
  • cluster.networkConfig.network
  • cluster.tags.key
Opsi ekspor data
  • csvExportOptions.escapeCharacter
  • csvExportOptions.fieldDelimiter
  • csvExportOptions.quoteCharacter
  • csvExportOptions.selectQuery
  • gcsDestination.uri
  • sqlExportOptions.tables
Opsi impor data
  • csvImportOptions.columns
  • csvImportOptions.escapeCharacter
  • csvImportOptions.fieldDelimiter
  • csvImportOptions.quoteCharacter
  • csvImportOptions.table
  • gcsUri
Pemfilteran dan pengurutan
  • filter
  • orderBy
  • pageToken
Konfigurasi instance
  • instance.connectionPoolConfig.userFlags.users
  • instance.databaseFlags.key
  • instance.displayName
  • instance.labels.value
  • instance.machineConfig.machineType
  • instance.networkConfig.allocatedIpRangeOverride
Lokasi dan cakupan
  • database
  • instance
  • location
  • parent
  • user
Meminta metadata
  • backup.etag
  • cluster.etag
  • endpoint.etag
  • etag
  • instance.etag
  • requestId
Identifikasi resource
  • backupId
  • clusterId
  • databaseId
  • endpointId
  • instanceId
  • name

Langkah berikutnya