Supporto normativo in Cloud Logging

Questo documento descrive le funzionalità, le configurazioni e le API in Cloud Logging che sono in linea con i controlli per i pacchetti di controlli supportati. Questo documento presuppone che tu stia utilizzando Assured Workloads.

Confine per i dati per ITAR

Servizi supportati

La tabella seguente elenca le API e le versioni di Cloud Logging che soddisfano i requisiti del confine dei dati per l'ITAR.

Servizio Versione Stato
logging.googleapis.com v2 SUPPORTATI

Regioni supportate per la conformità

Cloud Logging è disponibile per il confine per i dati per ITAR nelle seguenti Google Cloud regioni:

  • us-central1
  • us-central1
  • us-central2
  • us-east1
  • us-east4
  • us-east5
  • us-south1
  • us-west1
  • us-west2
  • us-west3
  • us-west4
  • us-central1
  • us-central2
  • us-east1
  • us-east4
  • us-east5
  • us-south1
  • us-west1
  • us-west2
  • us-west3
  • us-west4

Campi API per dati sensibili

Risorsa: nessuna risorsa

La tabella seguente specifica i campi e le risorse API progettati per gestire i dati protetti ai sensi del Data Boundary per l'ITAR.

Metodo API Campi protetti

Servizio: logging.googleapis.com

API REST: POST /v2/aggregations:read

Metodi RPC:

  • google.logging.v2.LoggingServiceV2.AggregateLogs
  • filter

Servizio: logging.googleapis.com

API REST: POST /v2/data:query

Metodi RPC:

  • google.logging.v2.AnalyticsService.QueryData
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Servizio: logging.googleapis.com

API REST: POST /v2/data:queryLocal

Metodi RPC:

  • google.logging.v2.AnalyticsService.QueryDataLocal
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Servizio: logging.googleapis.com

API REST: POST /v2/data:querySync

Metodi RPC:

  • google.logging.v2.AnalyticsService.QueryDataSync
  • sqlQueryStep.parameters.intArray.values
  • sqlQueryStep.parameters.intValue
  • sqlQueryStep.parameters.stringArray.values
  • sqlQueryStep.parameters.stringValue
  • sqlQueryStep.sqlQuery

Servizio: logging.googleapis.com

API REST: POST /v2/entries:copy

Metodi RPC:

  • google.logging.v2.ConfigServiceV2.CopyLogEntries
  • filter

Servizio: logging.googleapis.com

API REST: POST /v2/entries:list

Metodi RPC:

  • google.logging.v2.LoggingServiceV2.ListLogEntries
  • filter

Servizio: logging.googleapis.com

API REST: POST /v2/entries:readLegacy

Metodi RPC:

  • google.logging.v2.LoggingServiceV2.ReadLogEntriesLegacy
  • filter

Servizio: logging.googleapis.com

API REST: POST /v2/entries:redact

Metodi RPC:

  • google.logging.v2.ConfigServiceV2.RedactLogEntries
  • filter

Servizio: logging.googleapis.com

API REST: POST /v2/entries:write

Metodi RPC:

  • google.logging.v2.LoggingServiceV2.WriteLogEntries
  • entries.jsonPayload.fields.key
  • entries.jsonPayload.fields.value.boolValue
  • entries.jsonPayload.fields.value.nullValue
  • entries.jsonPayload.fields.value.numberValue
  • entries.jsonPayload.fields.value.stringValue
  • entries.protoPayload.typeUrl
  • entries.protoPayload.value
  • entries.sourceLocation.file
  • entries.sourceLocation.function
  • entries.textPayload

Servizio: logging.googleapis.com

API REST: POST /v2/generation:generateQuery

Metodi RPC:

  • google.logging.v2.AnalyticsService.GenerateQuery
  • prompt

Servizio: logging.googleapis.com

API REST: POST /v2/query:extractQueryResources

Metodi RPC:

  • google.logging.v2.AnalyticsService.ExtractQueryResources
  • query

Servizio: logging.googleapis.com

API REST: POST /v2/query:translate

Metodi RPC:

  • google.logging.v2.UiSupportService.TranslateQuery
  • filter
  • histogramQuery.fieldNames

Servizio: logging.googleapis.com

API REST: POST /v2/query:translateTableNames

Metodi RPC:

  • google.logging.v2.AnalyticsService.TranslateTableNames
  • query

Servizio: logging.googleapis.com

API REST: POST /v2/query:validate

Metodi RPC:

  • google.logging.v2.AnalyticsService.ValidateQuery
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Servizio: logging.googleapis.com

API REST: POST /v2/query:validateAlerting

Metodi RPC:

  • google.logging.v2.AnalyticsService.ValidateAlertingQuery
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Servizio: logging.googleapis.com

API REST: POST /v2/query:validateAndGetExpression

Metodi RPC:

  • google.logging.v2.UiSupportService.ValidateAndGetExpression
  • expression.phrase.values
  • expression.position.endColumn
  • expression.position.endLine
  • expression.position.length
  • expression.position.startColumn
  • expression.position.startLine
  • expression.restriction.comparator
  • expression.subscriptIndex
  • expression.value
  • filter

Servizio: logging.googleapis.com

API REST: POST /v2/query:validateLocal

Metodi RPC:

  • google.logging.v2.AnalyticsService.ValidateQueryLocal
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Servizio: logging.googleapis.com

API REST: POST /v2/query:validateQueryAlerting

Metodi RPC:

  • google.logging.v2.AnalyticsService.ValidateQueryAlerting
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Servizio: logging.googleapis.com

API REST: POST /v2/query:writeRedactedQuery

Metodi RPC:

  • google.logging.v2.AnalyticsService.WriteRedactedQuery
  • queries

Servizio: logging.googleapis.com

API REST: POST /v2/searches:suggest

Metodi RPC:

  • google.logging.v2.InsightsService.SuggestSearches
  • fieldValues.fieldValues.value

Servizio: logging.googleapis.com

API REST: POST /v2beta1/entries:list

Metodi RPC:

  • google.logging.v2.LoggingServiceV2.ListLogEntries
  • filter

Servizio: logging.googleapis.com

API REST: POST /v2beta1/entries:write

Metodi RPC:

  • google.logging.v2.LoggingServiceV2.WriteLogEntries
  • entries.jsonPayload.fields.key
  • entries.jsonPayload.fields.value.boolValue
  • entries.jsonPayload.fields.value.nullValue
  • entries.jsonPayload.fields.value.numberValue
  • entries.jsonPayload.fields.value.stringValue
  • entries.protoPayload.typeUrl
  • entries.protoPayload.value
  • entries.sourceLocation.file
  • entries.sourceLocation.function
  • entries.textPayload

Campi non destinati ai dati sensibili

La seguente tabella fornisce un elenco illustrativo di categorie di campi e campi specifici non adatti a informazioni sensibili. Per mantenere la conformità, evita di inserire dati protetti in questi campi. Per un elenco completo, contatta il tuo rappresentante Google Cloud.

Categoria Campi
Specifiche del bucket
  • bucket.description
  • bucket.indexConfigs.fieldPath
  • bucket.restrictedFields
  • bucket.tags.key
  • bucket.tags.value
Impostazioni di configurazione
  • bucket.cmekSettings.kmsKey
  • cmekSettings.kmsKeyName
  • settings.defaultStorageLocation
  • settings.kmsKeyName
  • settings.name
  • settings.storageLocation
Filtro e selezione dei dati
  • exclusion.filter
  • filter
  • notificationRule.filter
  • savedQuery.loggingQuery.filter
  • sink.filter
  • view.filter
Impostazioni delle regole di notifica
  • notificationRule.alertPolicyDetails.condition
  • notificationRule.alertPolicyDetails.userLabels.key
  • notificationRule.alertPolicyDetails.verbosityLabels.key
  • notificationRule.notificationChannels
  • notificationRule.valueExtractors.key
  • notificationRule.valueExtractors.value
Paginazione e ordinamento
  • listQuery.orderBy
  • orderBy
  • pageToken
  • savedQuery.opsAnalyticsQuery.queryBuilder.orderBys.field
Specifiche della query
  • analyticsView.sqlQuery
  • query.querySteps.alertingQueryStep.thresholdCondition.valueThreshold.valueColumn
  • query.querySteps.queryBuilderQueryStep.queryBuilder.searchTerm
  • query.querySteps.sqlQueryStep.parameters.name
  • savedQuery.opsAnalyticsQuery.queryBuilder.resourceNames
  • savedQuery.opsAnalyticsQuery.sqlQueryText
Attributi risorsa
  • internalLabels.key
  • internalLabels.value
  • labels.key
  • labels.value
  • resource.labels.key
  • resource.labels.value
Identificazione delle risorse
  • analyticsViewId
  • bucketId
  • linkId
  • name
  • parent
  • viewId
Configurazione della query salvata
  • savedQuery.description
  • savedQuery.displayName
  • savedQuery.loggingQuery.summaryFields.field
  • savedQuery.opsAnalyticsQuery.queryBuilder.fieldSources.projectedField.regexExtraction
  • savedQuery.opsAnalyticsQuery.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
Aggiorna maschera
  • updateMask.paths

Passaggi successivi