Suporte regulatório no Cloud Logging

Este documento descreve os recursos, as configurações e as APIs do Cloud Logging que se alinham aos controles dos pacotes de controle compatíveis. Neste documento, presumimos que você esteja usando o Assured Workloads.

Limite de dados para ITAR

Serviços compatíveis

A tabela a seguir lista as APIs e versões do Cloud Logging que atendem aos requisitos da fronteira de dados para a ITAR.

Serviço Versão Status
logging.googleapis.com v2 COMPATÍVEL

Regiões com suporte para compliance

O Cloud Logging está disponível para o limite de dados da ITAR nas seguintes regiões Google Cloud :

  • us-central1
  • us-central1
  • us-central2
  • us-east1
  • us-east4
  • us-east5
  • us-south1
  • us-west1
  • us-west2
  • us-west3
  • us-west4
  • us-central1
  • us-central2
  • us-east1
  • us-east4
  • us-east5
  • us-south1
  • us-west1
  • us-west2
  • us-west3
  • us-west4

Campos da API para dados sensíveis

Recurso: nenhum recurso

A tabela a seguir especifica os recursos e campos da API projetados para processar dados protegidos pela fronteira de dados para ITAR.

Método de API Campos protegidos

Serviço: logging.googleapis.com

API REST: POST /v2/aggregations:read

Métodos RPC:

  • google.logging.v2.LoggingServiceV2.AggregateLogs
  • filter

Serviço: logging.googleapis.com

API REST: POST /v2/data:query

Métodos RPC:

  • google.logging.v2.AnalyticsService.QueryData
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Serviço: logging.googleapis.com

API REST: POST /v2/data:queryLocal

Métodos RPC:

  • google.logging.v2.AnalyticsService.QueryDataLocal
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Serviço: logging.googleapis.com

API REST: POST /v2/data:querySync

Métodos RPC:

  • google.logging.v2.AnalyticsService.QueryDataSync
  • sqlQueryStep.parameters.intArray.values
  • sqlQueryStep.parameters.intValue
  • sqlQueryStep.parameters.stringArray.values
  • sqlQueryStep.parameters.stringValue
  • sqlQueryStep.sqlQuery

Serviço: logging.googleapis.com

API REST: POST /v2/entries:copy

Métodos RPC:

  • google.logging.v2.ConfigServiceV2.CopyLogEntries
  • filter

Serviço: logging.googleapis.com

API REST: POST /v2/entries:list

Métodos RPC:

  • google.logging.v2.LoggingServiceV2.ListLogEntries
  • filter

Serviço: logging.googleapis.com

API REST: POST /v2/entries:readLegacy

Métodos RPC:

  • google.logging.v2.LoggingServiceV2.ReadLogEntriesLegacy
  • filter

Serviço: logging.googleapis.com

API REST: POST /v2/entries:redact

Métodos RPC:

  • google.logging.v2.ConfigServiceV2.RedactLogEntries
  • filter

Serviço: logging.googleapis.com

API REST: POST /v2/entries:write

Métodos RPC:

  • google.logging.v2.LoggingServiceV2.WriteLogEntries
  • entries.jsonPayload.fields.key
  • entries.jsonPayload.fields.value.boolValue
  • entries.jsonPayload.fields.value.nullValue
  • entries.jsonPayload.fields.value.numberValue
  • entries.jsonPayload.fields.value.stringValue
  • entries.protoPayload.typeUrl
  • entries.protoPayload.value
  • entries.sourceLocation.file
  • entries.sourceLocation.function
  • entries.textPayload

Serviço: logging.googleapis.com

API REST: POST /v2/generation:generateQuery

Métodos RPC:

  • google.logging.v2.AnalyticsService.GenerateQuery
  • prompt

Serviço: logging.googleapis.com

API REST: POST /v2/query:extractQueryResources

Métodos RPC:

  • google.logging.v2.AnalyticsService.ExtractQueryResources
  • query

Serviço: logging.googleapis.com

API REST: POST /v2/query:translate

Métodos RPC:

  • google.logging.v2.UiSupportService.TranslateQuery
  • filter
  • histogramQuery.fieldNames

Serviço: logging.googleapis.com

API REST: POST /v2/query:translateTableNames

Métodos RPC:

  • google.logging.v2.AnalyticsService.TranslateTableNames
  • query

Serviço: logging.googleapis.com

API REST: POST /v2/query:validate

Métodos RPC:

  • google.logging.v2.AnalyticsService.ValidateQuery
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Serviço: logging.googleapis.com

API REST: POST /v2/query:validateAlerting

Métodos RPC:

  • google.logging.v2.AnalyticsService.ValidateAlertingQuery
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Serviço: logging.googleapis.com

API REST: POST /v2/query:validateAndGetExpression

Métodos RPC:

  • google.logging.v2.UiSupportService.ValidateAndGetExpression
  • expression.phrase.values
  • expression.position.endColumn
  • expression.position.endLine
  • expression.position.length
  • expression.position.startColumn
  • expression.position.startLine
  • expression.restriction.comparator
  • expression.subscriptIndex
  • expression.value
  • filter

Serviço: logging.googleapis.com

API REST: POST /v2/query:validateLocal

Métodos RPC:

  • google.logging.v2.AnalyticsService.ValidateQueryLocal
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Serviço: logging.googleapis.com

API REST: POST /v2/query:validateQueryAlerting

Métodos RPC:

  • google.logging.v2.AnalyticsService.ValidateQueryAlerting
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Serviço: logging.googleapis.com

API REST: POST /v2/query:writeRedactedQuery

Métodos RPC:

  • google.logging.v2.AnalyticsService.WriteRedactedQuery
  • queries

Serviço: logging.googleapis.com

API REST: POST /v2/searches:suggest

Métodos RPC:

  • google.logging.v2.InsightsService.SuggestSearches
  • fieldValues.fieldValues.value

Serviço: logging.googleapis.com

API REST: POST /v2beta1/entries:list

Métodos RPC:

  • google.logging.v2.LoggingServiceV2.ListLogEntries
  • filter

Serviço: logging.googleapis.com

API REST: POST /v2beta1/entries:write

Métodos RPC:

  • google.logging.v2.LoggingServiceV2.WriteLogEntries
  • entries.jsonPayload.fields.key
  • entries.jsonPayload.fields.value.boolValue
  • entries.jsonPayload.fields.value.nullValue
  • entries.jsonPayload.fields.value.numberValue
  • entries.jsonPayload.fields.value.stringValue
  • entries.protoPayload.typeUrl
  • entries.protoPayload.value
  • entries.sourceLocation.file
  • entries.sourceLocation.function
  • entries.textPayload

Campos não destinados a dados sensíveis

A tabela a seguir fornece uma lista ilustrativa de categorias e campos específicos que não são adequados para informações sensíveis. Para manter a compliance, evite colocar dados protegidos nesses campos. Para uma lista completa, entre em contato com seu representante do Google Cloud.

Categoria Campos
Especificidades do bucket
  • bucket.description
  • bucket.indexConfigs.fieldPath
  • bucket.restrictedFields
  • bucket.tags.key
  • bucket.tags.value
Configurações
  • bucket.cmekSettings.kmsKey
  • cmekSettings.kmsKeyName
  • settings.defaultStorageLocation
  • settings.kmsKeyName
  • settings.name
  • settings.storageLocation
Filtragem e seleção de dados
  • exclusion.filter
  • filter
  • notificationRule.filter
  • savedQuery.loggingQuery.filter
  • sink.filter
  • view.filter
Configurações de regras de notificação
  • notificationRule.alertPolicyDetails.condition
  • notificationRule.alertPolicyDetails.userLabels.key
  • notificationRule.alertPolicyDetails.verbosityLabels.key
  • notificationRule.notificationChannels
  • notificationRule.valueExtractors.key
  • notificationRule.valueExtractors.value
Paginação e ordenação
  • listQuery.orderBy
  • orderBy
  • pageToken
  • savedQuery.opsAnalyticsQuery.queryBuilder.orderBys.field
Especificidades da consulta
  • analyticsView.sqlQuery
  • query.querySteps.alertingQueryStep.thresholdCondition.valueThreshold.valueColumn
  • query.querySteps.queryBuilderQueryStep.queryBuilder.searchTerm
  • query.querySteps.sqlQueryStep.parameters.name
  • savedQuery.opsAnalyticsQuery.queryBuilder.resourceNames
  • savedQuery.opsAnalyticsQuery.sqlQueryText
Atributos de recurso
  • internalLabels.key
  • internalLabels.value
  • labels.key
  • labels.value
  • resource.labels.key
  • resource.labels.value
Identificação de recursos
  • analyticsViewId
  • bucketId
  • linkId
  • name
  • parent
  • viewId
Configuração de consulta salva
  • savedQuery.description
  • savedQuery.displayName
  • savedQuery.loggingQuery.summaryFields.field
  • savedQuery.opsAnalyticsQuery.queryBuilder.fieldSources.projectedField.regexExtraction
  • savedQuery.opsAnalyticsQuery.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
Máscara de atualização
  • updateMask.paths

A seguir