Cloud Logging 中的法规支持

本文档介绍了 Cloud Logging 中与受支持的控制措施套餐的控制措施相符的功能、配置和 API。本文档假定您使用的是 Assured Workloads。

显示全部 ITAR 的数据边界

ITAR 的数据边界 支持的服务 下表列出了符合 ITAR 数据边界要求的 Cloud Logging API 和版本。 服务 版本 状态 logging.googleapis.com v2 支持 支持合规性功能的区域 Cloud Logging 可在以下 Google Cloud 区域用于 ITAR 数据边界： us-central1 us-central1 us-central2 us-east1 us-east4 us-east5 us-south1 us-west1 us-west2 us-west3 us-west4 us-central1 us-central2 us-east1 us-east4 us-east5 us-south1 us-west1 us-west2 us-west3 us-west4 敏感数据的 API 字段 资源：无资源 下表列出了旨在处理受 ITAR 数据边界保护的数据的 API 资源和字段。 API 方法 受保护的字段 服务：logging.googleapis.com REST API：POST /v2/aggregations:read 远程过程调用 (RPC) 方法： google.logging.v2.LoggingServiceV2.AggregateLogs filter 服务：logging.googleapis.com REST API：POST /v2/data:query 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.QueryData query.querySteps.queryBuilderQueryStep.parameters.intArray.values query.querySteps.queryBuilderQueryStep.parameters.intValue query.querySteps.queryBuilderQueryStep.parameters.stringArray.values query.querySteps.queryBuilderQueryStep.parameters.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction query.querySteps.sqlQueryStep.parameters.intArray.values query.querySteps.sqlQueryStep.parameters.intValue query.querySteps.sqlQueryStep.parameters.stringArray.values query.querySteps.sqlQueryStep.parameters.stringValue query.querySteps.sqlQueryStep.sqlQuery 服务：logging.googleapis.com REST API：POST /v2/data:queryLocal 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.QueryDataLocal query.querySteps.queryBuilderQueryStep.parameters.intArray.values query.querySteps.queryBuilderQueryStep.parameters.intValue query.querySteps.queryBuilderQueryStep.parameters.stringArray.values query.querySteps.queryBuilderQueryStep.parameters.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction query.querySteps.sqlQueryStep.parameters.intArray.values query.querySteps.sqlQueryStep.parameters.intValue query.querySteps.sqlQueryStep.parameters.stringArray.values query.querySteps.sqlQueryStep.parameters.stringValue query.querySteps.sqlQueryStep.sqlQuery 服务：logging.googleapis.com REST API：POST /v2/data:querySync 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.QueryDataSync sqlQueryStep.parameters.intArray.values sqlQueryStep.parameters.intValue sqlQueryStep.parameters.stringArray.values sqlQueryStep.parameters.stringValue sqlQueryStep.sqlQuery 服务：logging.googleapis.com REST API：POST /v2/entries:copy 远程过程调用 (RPC) 方法： google.logging.v2.ConfigServiceV2.CopyLogEntries filter 服务：logging.googleapis.com REST API：POST /v2/entries:list 远程过程调用 (RPC) 方法： google.logging.v2.LoggingServiceV2.ListLogEntries filter 服务：logging.googleapis.com REST API：POST /v2/entries:readLegacy 远程过程调用 (RPC) 方法： google.logging.v2.LoggingServiceV2.ReadLogEntriesLegacy filter 服务：logging.googleapis.com REST API：POST /v2/entries:redact 远程过程调用 (RPC) 方法： google.logging.v2.ConfigServiceV2.RedactLogEntries filter 服务：logging.googleapis.com REST API：POST /v2/entries:write 远程过程调用 (RPC) 方法： google.logging.v2.LoggingServiceV2.WriteLogEntries entries.jsonPayload.fields.key entries.jsonPayload.fields.value.boolValue entries.jsonPayload.fields.value.nullValue entries.jsonPayload.fields.value.numberValue entries.jsonPayload.fields.value.stringValue entries.protoPayload.typeUrl entries.protoPayload.value entries.sourceLocation.file entries.sourceLocation.function entries.textPayload 服务：logging.googleapis.com REST API：POST /v2/generation:generateQuery 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.GenerateQuery prompt 服务：logging.googleapis.com REST API：POST /v2/query:extractQueryResources 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.ExtractQueryResources query 服务：logging.googleapis.com REST API：POST /v2/query:translate 远程过程调用 (RPC) 方法： google.logging.v2.UiSupportService.TranslateQuery filter histogramQuery.fieldNames 服务：logging.googleapis.com REST API：POST /v2/query:translateTableNames 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.TranslateTableNames query 服务：logging.googleapis.com REST API：POST /v2/query:validate 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.ValidateQuery query.querySteps.queryBuilderQueryStep.parameters.intArray.values query.querySteps.queryBuilderQueryStep.parameters.intValue query.querySteps.queryBuilderQueryStep.parameters.stringArray.values query.querySteps.queryBuilderQueryStep.parameters.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction query.querySteps.sqlQueryStep.parameters.intArray.values query.querySteps.sqlQueryStep.parameters.intValue query.querySteps.sqlQueryStep.parameters.stringArray.values query.querySteps.sqlQueryStep.parameters.stringValue query.querySteps.sqlQueryStep.sqlQuery 服务：logging.googleapis.com REST API：POST /v2/query:validateAlerting 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.ValidateAlertingQuery query.querySteps.queryBuilderQueryStep.parameters.intArray.values query.querySteps.queryBuilderQueryStep.parameters.intValue query.querySteps.queryBuilderQueryStep.parameters.stringArray.values query.querySteps.queryBuilderQueryStep.parameters.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction query.querySteps.sqlQueryStep.parameters.intArray.values query.querySteps.sqlQueryStep.parameters.intValue query.querySteps.sqlQueryStep.parameters.stringArray.values query.querySteps.sqlQueryStep.parameters.stringValue query.querySteps.sqlQueryStep.sqlQuery 服务：logging.googleapis.com REST API：POST /v2/query:validateAndGetExpression 远程过程调用 (RPC) 方法： google.logging.v2.UiSupportService.ValidateAndGetExpression expression.phrase.values expression.position.endColumn expression.position.endLine expression.position.length expression.position.startColumn expression.position.startLine expression.restriction.comparator expression.subscriptIndex expression.value filter 服务：logging.googleapis.com REST API：POST /v2/query:validateLocal 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.ValidateQueryLocal query.querySteps.queryBuilderQueryStep.parameters.intArray.values query.querySteps.queryBuilderQueryStep.parameters.intValue query.querySteps.queryBuilderQueryStep.parameters.stringArray.values query.querySteps.queryBuilderQueryStep.parameters.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction query.querySteps.sqlQueryStep.parameters.intArray.values query.querySteps.sqlQueryStep.parameters.intValue query.querySteps.sqlQueryStep.parameters.stringArray.values query.querySteps.sqlQueryStep.parameters.stringValue query.querySteps.sqlQueryStep.sqlQuery 服务：logging.googleapis.com REST API：POST /v2/query:validateQueryAlerting 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.ValidateQueryAlerting query.querySteps.queryBuilderQueryStep.parameters.intArray.values query.querySteps.queryBuilderQueryStep.parameters.intValue query.querySteps.queryBuilderQueryStep.parameters.stringArray.values query.querySteps.queryBuilderQueryStep.parameters.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction query.querySteps.sqlQueryStep.parameters.intArray.values query.querySteps.sqlQueryStep.parameters.intValue query.querySteps.sqlQueryStep.parameters.stringArray.values query.querySteps.sqlQueryStep.parameters.stringValue query.querySteps.sqlQueryStep.sqlQuery 服务：logging.googleapis.com REST API：POST /v2/query:writeRedactedQuery 远程过程调用 (RPC) 方法： google.logging.v2.AnalyticsService.WriteRedactedQuery queries 服务：logging.googleapis.com REST API：POST /v2/searches:suggest 远程过程调用 (RPC) 方法： google.logging.v2.InsightsService.SuggestSearches fieldValues.fieldValues.value 服务：logging.googleapis.com REST API：POST /v2beta1/entries:list 远程过程调用 (RPC) 方法： google.logging.v2.LoggingServiceV2.ListLogEntries filter 服务：logging.googleapis.com REST API：POST /v2beta1/entries:write 远程过程调用 (RPC) 方法： google.logging.v2.LoggingServiceV2.WriteLogEntries entries.jsonPayload.fields.key entries.jsonPayload.fields.value.boolValue entries.jsonPayload.fields.value.nullValue entries.jsonPayload.fields.value.numberValue entries.jsonPayload.fields.value.stringValue entries.protoPayload.typeUrl entries.protoPayload.value entries.sourceLocation.file entries.sourceLocation.function entries.textPayload 不适用于敏感数据的字段 下表列出了不适合包含敏感信息的字段类别和特定字段，以供参考。为确保合规性，请避免在这些字段中放置受保护的数据。如需查看完整列表，请与您的 Google Cloud 代表联系。 类别 字段 分桶具体信息 bucket.description bucket.indexConfigs.fieldPath bucket.restrictedFields bucket.tags.key bucket.tags.value 配置设置 bucket.cmekSettings.kmsKey cmekSettings.kmsKeyName settings.defaultStorageLocation settings.kmsKeyName settings.name settings.storageLocation 数据过滤和选择 exclusion.filter filter notificationRule.filter savedQuery.loggingQuery.filter sink.filter view.filter 通知规则设置 notificationRule.alertPolicyDetails.condition notificationRule.alertPolicyDetails.userLabels.key notificationRule.alertPolicyDetails.verbosityLabels.key notificationRule.notificationChannels notificationRule.valueExtractors.key notificationRule.valueExtractors.value 分页和排序 listQuery.orderBy orderBy pageToken savedQuery.opsAnalyticsQuery.queryBuilder.orderBys.field 查询具体信息 analyticsView.sqlQuery query.querySteps.alertingQueryStep.thresholdCondition.valueThreshold.valueColumn query.querySteps.queryBuilderQueryStep.queryBuilder.searchTerm query.querySteps.sqlQueryStep.parameters.name savedQuery.opsAnalyticsQuery.queryBuilder.resourceNames savedQuery.opsAnalyticsQuery.sqlQueryText 资源特性 internalLabels.key internalLabels.value labels.key labels.value resource.labels.key resource.labels.value 资源标识 analyticsViewId bucketId linkId name parent viewId 已保存的查询配置 savedQuery.description savedQuery.displayName savedQuery.loggingQuery.summaryFields.field savedQuery.opsAnalyticsQuery.queryBuilder.fieldSources.projectedField.regexExtraction savedQuery.opsAnalyticsQuery.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction 更新掩码 updateMask.paths

后续步骤

• 详细了解 Google Cloud中的合规性。