本文說明 Managed Service for Apache Spark 中的功能、設定和 API,這些項目與支援的控制項套件控制項一致。本文假設您使用的是 Assured Workloads。

ITAR 資料邊界

支援的服務

下表列出符合 ITAR 資料邊界要求的 Managed Service for Apache Spark API 和版本。

服務 版本 狀態
dataproc.googleapis.com v1 支援
dataproc.googleapis.com v1beta2 支援

支援法規遵循的地區

Managed Service for Apache Spark 適用於下列 Google Cloud 區域的 ITAR 資料邊界:

  • us-central1
  • us-central2
  • us-east1
  • us-east4
  • us-east5
  • us-south1
  • us-west1
  • us-west2
  • us-west3
  • us-west4

機密資料的 API 欄位

資源:dataproc.googleapis.com/Batch

下表列出 API 資源和欄位,這些資源和欄位專門用來處理受 ITAR 資料邊界保護的資料。

API 方法 受保護的欄位

服務類型:dataproc.googleapis.com

REST API:POST /v1/{parent=projects/*/locations/*}/batches

RPC 方法:

  • google.cloud.dataproc.v1.BatchController.CreateBatch
  • batch.pysparkBatch.args
  • batch.rayBatch.args
  • batch.sparkBatch.args
  • batch.sparkRBatch.args
  • batch.sparkSqlBatch.queryVariables.key
  • batch.sparkSqlBatch.queryVariables.value

資源:dataproc.googleapis.com/Job

下表列出 API 資源和欄位,這些資源和欄位專門用來處理受 ITAR 資料邊界保護的資料。

API 方法 受保護的欄位

服務類型:dataproc.googleapis.com

REST API:PATCH /v1/projects/{project_id}/regions/{region}/jobs/{job_id}

RPC 方法:

  • google.cloud.dataproc.v1.JobController.UpdateJob
  • job.flinkJob.args
  • job.hadoopJob.args
  • job.hiveJob.queryList.queries
  • job.hiveJob.scriptVariables.key
  • job.hiveJob.scriptVariables.value
  • job.pigJob.queryList.queries
  • job.pigJob.scriptVariables.key
  • job.pigJob.scriptVariables.value
  • job.prestoJob.queryList.queries
  • job.pyflinkJob.args
  • job.pysparkJob.args
  • job.sparkJob.args
  • job.sparkRJob.args
  • job.sparkSqlJob.queryList.queries
  • job.sparkSqlJob.scriptVariables.key
  • job.sparkSqlJob.scriptVariables.value
  • job.trinoJob.queryList.queries

服務類型:dataproc.googleapis.com

REST API:PATCH /v1beta2/projects/{project_id}/regions/{region}/jobs/{job_id}

RPC 方法:

  • google.cloud.dataproc.v1beta2.JobController.UpdateJob
  • job.hadoopJob.args
  • job.hiveJob.queryList.queries
  • job.hiveJob.scriptVariables.key
  • job.hiveJob.scriptVariables.value
  • job.pigJob.queryList.queries
  • job.pigJob.scriptVariables.key
  • job.pigJob.scriptVariables.value
  • job.prestoJob.queryList.queries
  • job.pysparkJob.args
  • job.sparkJob.args
  • job.sparkRJob.args
  • job.sparkSqlJob.queryList.queries
  • job.sparkSqlJob.scriptVariables.key
  • job.sparkSqlJob.scriptVariables.value

服務類型:dataproc.googleapis.com

REST API:POST /v1/projects/{project_id}/regions/{region}/jobs:submit

RPC 方法:

  • google.cloud.dataproc.v1.JobController.SubmitJob
  • job.flinkJob.args
  • job.hadoopJob.args
  • job.hiveJob.queryList.queries
  • job.hiveJob.scriptVariables.key
  • job.hiveJob.scriptVariables.value
  • job.pigJob.queryList.queries
  • job.pigJob.scriptVariables.key
  • job.pigJob.scriptVariables.value
  • job.prestoJob.queryList.queries
  • job.pyflinkJob.args
  • job.pysparkJob.args
  • job.sparkJob.args
  • job.sparkRJob.args
  • job.sparkSqlJob.queryList.queries
  • job.sparkSqlJob.scriptVariables.key
  • job.sparkSqlJob.scriptVariables.value
  • job.trinoJob.queryList.queries

服務類型:dataproc.googleapis.com

REST API:POST /v1/projects/{project_id}/regions/{region}/jobs:submitAsOperation

RPC 方法:

  • google.cloud.dataproc.v1.JobController.SubmitJobAsOperation
  • job.flinkJob.args
  • job.hadoopJob.args
  • job.hiveJob.queryList.queries
  • job.hiveJob.scriptVariables.key
  • job.hiveJob.scriptVariables.value
  • job.pigJob.queryList.queries
  • job.pigJob.scriptVariables.key
  • job.pigJob.scriptVariables.value
  • job.prestoJob.queryList.queries
  • job.pyflinkJob.args
  • job.pysparkJob.args
  • job.sparkJob.args
  • job.sparkRJob.args
  • job.sparkSqlJob.queryList.queries
  • job.sparkSqlJob.scriptVariables.key
  • job.sparkSqlJob.scriptVariables.value
  • job.trinoJob.queryList.queries

服務類型:dataproc.googleapis.com

REST API:POST /v1beta2/projects/{project_id}/regions/{region}/jobs:submit

RPC 方法:

  • google.cloud.dataproc.v1beta2.JobController.SubmitJob
  • job.hadoopJob.args
  • job.hiveJob.queryList.queries
  • job.hiveJob.scriptVariables.key
  • job.hiveJob.scriptVariables.value
  • job.pigJob.queryList.queries
  • job.pigJob.scriptVariables.key
  • job.pigJob.scriptVariables.value
  • job.prestoJob.queryList.queries
  • job.pysparkJob.args
  • job.sparkJob.args
  • job.sparkRJob.args
  • job.sparkSqlJob.queryList.queries
  • job.sparkSqlJob.scriptVariables.key
  • job.sparkSqlJob.scriptVariables.value

服務類型:dataproc.googleapis.com

REST API:POST /v1beta2/projects/{project_id}/regions/{region}/jobs:submitAsOperation

RPC 方法:

  • google.cloud.dataproc.v1beta2.JobController.SubmitJobAsOperation
  • job.hadoopJob.args
  • job.hiveJob.queryList.queries
  • job.hiveJob.scriptVariables.key
  • job.hiveJob.scriptVariables.value
  • job.pigJob.queryList.queries
  • job.pigJob.scriptVariables.key
  • job.pigJob.scriptVariables.value
  • job.prestoJob.queryList.queries
  • job.pysparkJob.args
  • job.sparkJob.args
  • job.sparkRJob.args
  • job.sparkSqlJob.queryList.queries
  • job.sparkSqlJob.scriptVariables.key
  • job.sparkSqlJob.scriptVariables.value

資源:dataproc.googleapis.com/WorkflowTemplate

下表列出 API 資源和欄位,這些資源和欄位專門用來處理受 ITAR 資料邊界保護的資料。

API 方法 受保護的欄位

服務類型:dataproc.googleapis.com

REST API:POST /v1/{parent=projects/*/locations/*}/workflowTemplates

RPC 方法:

  • google.cloud.dataproc.v1.WorkflowTemplateService.CreateWorkflowTemplate
  • template.jobs.flinkJob.args
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pyflinkJob.args
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value
  • template.jobs.trinoJob.queryList.queries

服務類型:dataproc.googleapis.com

REST API:POST /v1/{parent=projects/*/locations/*}/workflowTemplates:instantiateInline

RPC 方法:

  • google.cloud.dataproc.v1.WorkflowTemplateService.InstantiateInlineWorkflowTemplate
  • template.jobs.flinkJob.args
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pyflinkJob.args
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value
  • template.jobs.trinoJob.queryList.queries

服務類型:dataproc.googleapis.com

REST API:POST /v1/{parent=projects/*/regions/*}/workflowTemplates

RPC 方法:

  • google.cloud.dataproc.v1.WorkflowTemplateService.CreateWorkflowTemplate
  • template.jobs.flinkJob.args
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pyflinkJob.args
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value
  • template.jobs.trinoJob.queryList.queries

服務類型:dataproc.googleapis.com

REST API:POST /v1/{parent=projects/*/regions/*}/workflowTemplates:instantiateInline

RPC 方法:

  • google.cloud.dataproc.v1.WorkflowTemplateService.InstantiateInlineWorkflowTemplate
  • template.jobs.flinkJob.args
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pyflinkJob.args
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value
  • template.jobs.trinoJob.queryList.queries

服務類型:dataproc.googleapis.com

REST API:POST /v1beta2/{parent=projects/*/locations/*}/workflowTemplates

RPC 方法:

  • google.cloud.dataproc.v1beta2.WorkflowTemplateService.CreateWorkflowTemplate
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value

服務類型:dataproc.googleapis.com

REST API:POST /v1beta2/{parent=projects/*/locations/*}/workflowTemplates:instantiateInline

RPC 方法:

  • google.cloud.dataproc.v1beta2.WorkflowTemplateService.InstantiateInlineWorkflowTemplate
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value

服務類型:dataproc.googleapis.com

REST API:POST /v1beta2/{parent=projects/*/regions/*}/workflowTemplates

RPC 方法:

  • google.cloud.dataproc.v1beta2.WorkflowTemplateService.CreateWorkflowTemplate
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value

服務類型:dataproc.googleapis.com

REST API:POST /v1beta2/{parent=projects/*/regions/*}/workflowTemplates:instantiateInline

RPC 方法:

  • google.cloud.dataproc.v1beta2.WorkflowTemplateService.InstantiateInlineWorkflowTemplate
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value

服務類型:dataproc.googleapis.com

REST API:PUT /v1/{template.name=projects/*/locations/*/workflowTemplates/*}

RPC 方法:

  • google.cloud.dataproc.v1.WorkflowTemplateService.UpdateWorkflowTemplate
  • template.jobs.flinkJob.args
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pyflinkJob.args
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value
  • template.jobs.trinoJob.queryList.queries

服務類型:dataproc.googleapis.com

REST API:PUT /v1/{template.name=projects/*/regions/*/workflowTemplates/*}

RPC 方法:

  • google.cloud.dataproc.v1.WorkflowTemplateService.UpdateWorkflowTemplate
  • template.jobs.flinkJob.args
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pyflinkJob.args
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value
  • template.jobs.trinoJob.queryList.queries

服務類型:dataproc.googleapis.com

REST API:PUT /v1beta2/{template.name=projects/*/locations/*/workflowTemplates/*}

RPC 方法:

  • google.cloud.dataproc.v1beta2.WorkflowTemplateService.UpdateWorkflowTemplate
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value

服務類型:dataproc.googleapis.com

REST API:PUT /v1beta2/{template.name=projects/*/regions/*/workflowTemplates/*}

RPC 方法:

  • google.cloud.dataproc.v1beta2.WorkflowTemplateService.UpdateWorkflowTemplate
  • template.jobs.hadoopJob.args
  • template.jobs.hiveJob.queryList.queries
  • template.jobs.hiveJob.scriptVariables.key
  • template.jobs.hiveJob.scriptVariables.value
  • template.jobs.pigJob.queryList.queries
  • template.jobs.pigJob.scriptVariables.key
  • template.jobs.pigJob.scriptVariables.value
  • template.jobs.prestoJob.queryList.queries
  • template.jobs.pysparkJob.args
  • template.jobs.sparkJob.args
  • template.jobs.sparkRJob.args
  • template.jobs.sparkSqlJob.queryList.queries
  • template.jobs.sparkSqlJob.scriptVariables.key
  • template.jobs.sparkSqlJob.scriptVariables.value

不適合用於機密資料的欄位

下表列出不適合用於敏感資訊的欄位類別和特定欄位,僅供參考。為確保符合規定,請勿在這些欄位中放置受保護的資料。如需完整清單,請與 Google Cloud 代表聯絡。

類別 欄位
叢集識別
  • cluster
  • clusterName
  • clusterUuid
工作識別
  • job
  • jobId
  • yarnApplicationId
  • yarnApplicationIds
工作專屬設定
  • job.flinkJob.jarFileUris
  • job.hadoopJob.fileUris
  • job.pigJob.queryFileUri
  • job.pyflinkJob.pythonFileUris
  • job.pysparkJob.fileUris
  • job.sparkSqlJob.queryFileUri
位置識別
  • region
網路和連線
  • cluster.config.gceClusterConfig.networkUri
  • cluster.config.gceClusterConfig.nodeGroupAffinity.nodeGroupUri
  • cluster.config.gceClusterConfig.subnetworkUri
專案識別
  • project
  • projectId
資源設定 - 計算
  • cluster.config.auxiliaryNodeGroups.nodeGroup.nodeGroupConfig.machineTypeUri
  • cluster.config.masterConfig.machineTypeUri
  • cluster.config.masterConfig.minCpuPlatform
  • cluster.config.secondaryWorkerConfig.machineTypeUri
  • cluster.config.workerConfig.machineTypeUri
  • cluster.config.workerConfig.minCpuPlatform
資源設定 - 儲存空間
  • cluster.config.auxiliaryNodeGroups.nodeGroup.nodeGroupConfig.diskConfig.bootDiskType
  • cluster.config.masterConfig.diskConfig.bootDiskType
  • cluster.config.masterConfig.diskConfig.localSsdInterface
  • cluster.config.secondaryWorkerConfig.diskConfig.bootDiskType
  • cluster.config.workerConfig.diskConfig.bootDiskType
  • cluster.config.workerConfig.diskConfig.localSsdInterface
安全性設定 - 加密
  • cluster.config.encryptionConfig.gcePdKmsKeyName
  • cluster.config.encryptionConfig.kmsKey
安全性設定 - Kerberos
  • cluster.config.securityConfig.kerberosConfig.kdcDbKeyUri
  • cluster.config.securityConfig.kerberosConfig.keyPasswordUri
  • cluster.config.securityConfig.kerberosConfig.keystoreUri
  • cluster.config.securityConfig.kerberosConfig.kmsKeyUri
  • cluster.config.securityConfig.kerberosConfig.rootPrincipalPasswordUri
  • cluster.config.securityConfig.kerberosConfig.truststoreUri

後續步驟