指定底限設定

本文說明如何查看及更新 Model Armor 底限設定，並提供違反底限設定的範例。

底限設定有兩個主要用途：

• 範本一致性：確保新範本的限制至少與底限設定中定義的限制相同。範本一致性是在機構和資料夾層級定義。

• 內嵌強制執行：對 Gemini 模型和 Google Cloud MCP 伺服器套用 Model Armor 保護措施。內嵌強制執行是在專案層級設定。如果您使用內嵌強制執行的底限設定，則在專案中建立的任何範本都必須符合這些底限設定。

事前準備

開始之前，請先完成下列工作。

取得必要權限

如要取得管理底限設定所需的權限，請要求系統管理員授予您 Model Armor 底限設定的Model Armor 底限設定管理員 (roles/modelarmor.floorSettingsAdmin) IAM 角色。如要進一步瞭解如何授予角色，請參閱「管理專案、資料夾和組織的存取權」。

您或許也能透過自訂角色或其他預先定義的角色，取得必要權限。

啟用 API

您必須先啟用 Model Armor API，才能使用 Model Armor。

控制台

1. 啟用 Model Armor API。

   啟用 API 時所需的角色

   如要啟用 API，您需要服務使用情形管理員 IAM 角色 (roles/serviceusage.serviceUsageAdmin)，其中包含 serviceusage.services.enable 權限。瞭解如何授予角色。

   啟用 API

2. 選取要啟用 Model Armor 的專案。

gcloud

開始前，請使用 Google Cloud CLI 搭配 Model Armor API 執行下列步驟：

1. 在 Google Cloud 控制台中啟用 Cloud Shell。

   啟用 Cloud Shell

   Google Cloud 主控台底部會開啟一個 Cloud Shell 工作階段，並顯示指令列提示。Cloud Shell 是已安裝 Google Cloud CLI 的殼層環境，並已針對您目前的專案設定好相關值。工作階段可能要幾秒鐘的時間才能初始化。

2. 使用 gcloud CLI 設定 API 端點覆寫。

使用 gcloud CLI 設定 API 端點覆寫

如果您使用 gcloud CLI 啟用 Model Armor API，才需要執行這個步驟。您必須手動設定 API 端點覆寫，確保 gcloud CLI 正確將要求轉送至 Model Armor 服務。

執行下列指令，使用全球 API 端點：

gcloud config set api_endpoint_overrides/modelarmor "https://modelarmor.googleapis.com/"

底限設定應用程式

系統一律會套用本機設定。舉例來說，如果底限設定有所衝突，系統會優先採用資源階層結構中較低的設定。同樣地，專案層級的底限設定會覆寫衝突的資料夾層級底限設定。

下表列出不同層級的底限設定套用方式：

底限設定層級	應用程式
機構層級	適用於機構內的所有項目。
資料夾層級	套用至特定資料夾中的所有專案。
專案層級	只會套用至該特定專案。

為說明在不同層級設定底限設定時的套用方式，請參考以下情境範例。舉例來說，假設您設定的底限設定如下：

• 資料夾層級 (較不具體) 的底限設定：這個資料夾中的所有內容都必須啟用惡意 URI 篩選器。
• 專案層級 (更具體) 的底限設定：資料夾中的專案必須使用提示詞注入和越獄偵測功能，且信心水準為中等。

在這個情境中，設定會產生下列結果：

• 在專案中建立的任何範本都必須包含提示詞注入和越獄偵測篩選器，因為專案層級設定一律優先於資料夾層級設定。

• 在其他專案或資料夾中建立的範本，不會受到第一個資料夾中惡意 URI 篩選規則的影響。

除非是在機構層級設定，否則底限設定只會套用至階層中的特定層級，如果是機構層級設定，則會套用至整個機構。

範本和底限設定一致性

建立或更新 Model Armor 範本時，Model Armor 會檢查範本設定是否符合底限設定。您無法建立或更新比底限設定寬鬆的範本。

您可以在機構、資料夾和專案層級設定底限設定。使用者介面僅適用於專案層級，可讓您沿用機構或資料夾層級的設定。如要在機構或資料夾層級設定底價，請使用 API。

範本一致性會驗證範本設定。資料檢查功能會使用符合規範的範本中定義的設定，在執行階段分析提示或回覆。下表說明範本一致性和資料檢查如何套用至範本和底限設定。

檢查	底限設定	範本
範本一致性	在機構、資料夾或專案層級設定。 注意：您可以設定 Sensitive Data Protection，在範本上強制執行資料安全政策。不過，這不會驗證範本是否符合規定。	只能在專案層級設定。
資料檢查	僅在專案層級強制執行，使用檢查和封鎖模式。	透過 REST API、Service Extensions、Gemini Enterprise 和 Agent Runtime 強制執行。

與 Gemini Enterprise Agent Platform 和 Google Cloud MCP 伺服器整合

Model Armor 會整合 Agent Platform 和 Google Cloud MCP 伺服器，根據您定義的底限設定，篩選來自 Gemini 模型和Google Cloud 遠端 MCP 伺服器的要求和回覆。您必須啟用 Cloud Logging，才能查看提示和回覆。 詳情請參閱「Model Armor integration with Gemini Enterprise Agent Platform」和「Model Armor integration with Google Cloud MCP servers」。

指定底限設定

設定底限設定，為 Model Armor 範本定義最低偵測門檻。這些設定可確保所有新範本和修改過的範本都符合特定規定。

如要設定底限設定，請按照下列步驟操作：

1. 前往 Google Cloud 控制台的「Model Armor」頁面。

   前往 Model Armor

2. 選取專案。
3. 在「Model Armor」頁面中，前往「底限設定」分頁，然後按一下「設定底限設定」。
4. 在「底限設定」頁面中，選取設定選項。
5. 在「偵測」部分，設定偵測設定。
6. 選用：如果選取 Sensitive Data Protection 偵測，請設定「Sensitive Data Protection settings」(Sensitive Data Protection 設定)。

7. 在「負責任的 AI」部分，為每個內容篩選器設定信心水準。

   注意： 如未指定信賴等級，系統會預設為「中等以上」。

8. 在「服務」部分，選取要套用這些底限設定的服務。

9. 在「記錄」部分，選取「啟用 Cloud Logging」，即可記錄所有使用者提示詞、模型回覆和底限設定偵測工具結果。

10. 選取「啟用多語言支援」，即可使用多語言偵測設定。

11. 按一下「儲存底限設定」。

樓層設定變更會在幾分鐘後生效。

定義底限設定的沿用方式

設定底限設定時，請選取配置選項。

• 繼承上層項目的底限設定：繼承先前在資源階層中設定的底限。按一下「儲存底限設定」，然後略過其餘步驟。如要查看沿用設定，請前往「底限設定」分頁。

  注意： 啟用沿用設定後，沿用的設定會覆寫現有的樓層設定。

• 自訂：為這個專案定義底限設定。您為專案定義的自訂設定，會覆寫所有沿用的底限設定。

• 停用：停用所有繼承的底限設定。也就是說，系統不會對 Gemini 工作負載的 Model Armor 範本和 Agent Platform 套用任何偵測規則。按一下「儲存底限設定」，然後略過其餘步驟。在「樓層設定」分頁中查看停用狀態。

定義底限設定的套用位置

選取要套用所設定底限設定的服務。

• Model Armor - 建立及更新範本：Model Armor 會檢查專案中每個新範本和修改過的範本，確保最低設定符合底限設定。

  注意： 底限設定不會檢查範本是否符合 Sensitive Data Protection 規定。

• Google MCP 伺服器：檢查傳送至 Google 或遠端 MCP 伺服器的底限設定要求，確認是否達到底限設定門檻。 Google Cloud 詳情請參閱「整合 Model Armor 與 Google Cloud MCP 伺服器」(預先發布版)。

• Agent Platform：篩選傳送至 Gemini 模型的要求，然後記錄或封鎖達到底限設定門檻的要求。

  如果選取「代理商平台」，系統會顯示「代理商平台」部分，供您選擇底限設定的強制執行方式。

  • 僅檢查：偵測不符合底限設定的要求，但不加以封鎖。
  • 檢查並封鎖不符合門檻的要求：偵測並封鎖不符合底限設定的要求。

查看 Model Armor 底限設定

查看 Model Armor 底限設定，驗證現有設定、找出 AI 應用程式的最低需求，或在範本未如預期運作時排解問題。

執行下列指令，查看 Model Armor 底限設定。

控制台

1. 前往 Google Cloud 控制台的「Model Armor」頁面。

   前往 Model Armor

2. 確認您正在查看已啟用 Model Armor 的專案。

3. 在「Model Armor」頁面中，前往「底限設定」分頁。如果機構層級已設定樓層，您就能查看。如果沒有定義任何底限設定，您必須進行設定。詳情請參閱「設定樓層」。

gcloud

• 查看專案的 Model Armor 底限設定。

    gcloud model-armor floorsettings describe \
        --full-uri='projects/PROJECT_ID/locations/global/floorSetting'

• 查看機構的 Model Armor 底限設定。

    gcloud model-armor floorsettings describe \
        --full-uri='organizations/ORGANIZATION_ID/locations/global/floorSetting'

• 查看資料夾的 Model Armor 底限設定。

     gcloud model-armor floorsettings describe \
         --full-uri='folders/FOLDER_ID/locations/global/floorSetting'

  更改下列內容：

  • 樓層設定的專案 ID。
  • 底限設定的資料夾 ID。
  • 樓層設定的機構 ID。

REST

• 查看專案的 Model Armor 底限設定。

  curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json" \
    "https://modelarmor.googleapis.com/v1/projects/PROJECT_ID/locations/global/floorSetting"

• 查看資料夾的 Model Armor 底限設定。

  curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json" \
    "https://modelarmor.googleapis.com/v1/folders/FOLDER_ID/locations/global/floorSetting"

• 查看機構的 Model Armor 底限設定。

  curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json" \
    "https://modelarmor.googleapis.com/v1/organizations/ORGANIZATION_ID/locations/global/floorSetting"

更改下列內容：

• 樓層設定的專案 ID。
• 底限設定的資料夾 ID。
• 樓層設定的機構 ID。

C#

如要執行這段程式碼，請先設定 C# 開發環境，然後安裝 Model Armor C# SDK。

• 查看特定專案的 Model Armor 底限設定。

  using Google.Cloud.ModelArmor.V1;
  using System;
  
  public class GetProjectFloorSettings
  {
      public FloorSetting GetProjectFloorSetting(string projectId)
      {
          // Initialize client
          ModelArmorClient client = ModelArmorClient.Create();
  
          // Construct the resource name
          string name = $"projects/{projectId}/locations/global/floorSetting";
  
          // Create the request
          GetFloorSettingRequest request = new GetFloorSettingRequest { Name = name };
  
          // Make the request
          FloorSetting response = client.GetFloorSetting(request);
  
          Console.WriteLine($"Floor settings retrieved successfully: {response}");
  
          return response;
      }
  }

• 查看特定資料夾的 Model Armor 底限設定。

  using Google.Cloud.ModelArmor.V1;
  using System;
  
  public class GetFolderFloorSettings
  {
      public FloorSetting GetFolderFloorSetting(string folderId)
      {
          // Initialize client.
          ModelArmorClient client = ModelArmorClient.Create();
  
          // Construct the resource name.
          string name = $"folders/{folderId}/locations/global/floorSetting";
  
          // Create the request.
          GetFloorSettingRequest request = new GetFloorSettingRequest { Name = name };
  
          // Make the request.
          FloorSetting response = client.GetFloorSetting(request);
  
          return response;
      }
  }

• 查看特定機構的 Model Armor 底限設定。

  using Google.Cloud.ModelArmor.V1;
  using System;
  
  public class GetOrganizationFloorSettings
  {
      public FloorSetting GetOrganizationFloorSetting(string organizationId)
      {
          // Initialize client
          ModelArmorClient client = ModelArmorClient.Create();
  
          // Construct the resource name
          string name = $"organizations/{organizationId}/locations/global/floorSetting";
  
          // Create the request
          GetFloorSettingRequest request = new GetFloorSettingRequest { Name = name };
  
          // Make the request
          FloorSetting response = client.GetFloorSetting(request);
  
          Console.WriteLine($"Floor settings retrieved successfully: {response}");
  
          return response;
      }
  }

Go

如要執行這段程式碼，請先設定 Go 開發環境，然後安裝 Model Armor Go SDK。

• 查看特定專案的 Model Armor 底限設定。

  
  import (
  	"context"
  	"fmt"
  	"io"
  
  	modelarmor "cloud.google.com/go/modelarmor/apiv1"
  	modelarmorpb "cloud.google.com/go/modelarmor/apiv1/modelarmorpb"
  )
  
  // getProjectFloorSettings gets details of a single floor setting of a project.
  //
  // This method retrieves the details of a single floor setting of a project.
  //
  // w io.Writer: The writer to use for logging.
  // projectID string: The ID of the project.
  func getProjectFloorSettings(w io.Writer, projectID string) error {
  	ctx := context.Background()
  
  	// Create the Model Armor client.
  	client, err := modelarmor.NewClient(ctx)
  	if err != nil {
  		return fmt.Errorf("failed to create client: %w", err)
  	}
  	defer client.Close()
  
  	floorSettingsName := fmt.Sprintf("projects/%s/locations/global/floorSetting", projectID)
  
  	// Get the project floor setting.
  	req := &modelarmorpb.GetFloorSettingRequest{
  		Name: floorSettingsName,
  	}
  
  	response, err := client.GetFloorSetting(ctx, req)
  	if err != nil {
  		return fmt.Errorf("failed to get floor setting: %w", err)
  	}
  
  	// Print the retrieved floor setting using fmt.Fprintf with the io.Writer.
  	fmt.Fprintf(w, "Retrieved floor setting: %v\n", response)
  
  	return nil
  }
  

• 查看特定資料夾的 Model Armor 底限設定。

  
  import (
  	"context"
  	"fmt"
  	"io"
  
  	modelarmor "cloud.google.com/go/modelarmor/apiv1"
  	modelarmorpb "cloud.google.com/go/modelarmor/apiv1/modelarmorpb"
  )
  
  // getFolderFloorSettings gets details of a single floor setting of a folder.
  //
  // This method retrieves the details of a single floor setting of a folder.
  //
  // w io.Writer: The writer to use for logging.
  // folderID string: The ID of the folder.
  func getFolderFloorSettings(w io.Writer, folderID string) error {
  	ctx := context.Background()
  
  	// Create the Model Armor client.
  	client, err := modelarmor.NewClient(ctx)
  	if err != nil {
  		return fmt.Errorf("failed to create client: %w", err)
  	}
  	defer client.Close()
  
  	// Prepare folder floor setting path/name
  	floorSettingsName := fmt.Sprintf("folders/%s/locations/global/floorSetting", folderID)
  
  	// Get the folder floor setting.
  	req := &modelarmorpb.GetFloorSettingRequest{
  		Name: floorSettingsName,
  	}
  
  	response, err := client.GetFloorSetting(ctx, req)
  	if err != nil {
  		return fmt.Errorf("failed to get floor setting: %w", err)
  	}
  
  	// Print the retrieved floor setting using fmt.Fprintf with the io.Writer.
  	fmt.Fprintf(w, "Retrieved folder floor setting: %v\n", response)
  
  	return nil
  }
  

• 查看特定機構的 Model Armor 底限設定。

  
  import (
  	"context"
  	"fmt"
  	"io"
  
  	modelarmor "cloud.google.com/go/modelarmor/apiv1"
  	modelarmorpb "cloud.google.com/go/modelarmor/apiv1/modelarmorpb"
  )
  
  // getOrganizationFloorSettings gets details of a single floor setting of an organization.
  //
  // This method retrieves the details of a single floor setting of an organization.
  //
  // w io.Writer: The writer to use for logging.
  // organizationID string: The ID of the organization.
  func getOrganizationFloorSettings(w io.Writer, organizationID string) error {
  	ctx := context.Background()
  
  	// Create the Model Armor client.
  	client, err := modelarmor.NewClient(ctx)
  	if err != nil {
  		return fmt.Errorf("failed to create client: %w", err)
  	}
  	defer client.Close()
  
  	floorSettingsName := fmt.Sprintf("organizations/%s/locations/global/floorSetting", organizationID)
  
  	// Get the organization floor setting.
  	req := &modelarmorpb.GetFloorSettingRequest{
  		Name: floorSettingsName,
  	}
  
  	response, err := client.GetFloorSetting(ctx, req)
  	if err != nil {
  		return fmt.Errorf("failed to get floor setting: %w", err)
  	}
  
  	// Print the retrieved floor setting using fmt.Fprintf with the io.Writer.
  	fmt.Fprintf(w, "Retrieved org floor setting: %v\n", response)
  
  	return nil
  }
  

Java

如要執行這段程式碼，請先設定 Java 開發環境，然後安裝 Model Armor Java SDK。

• 查看特定專案的 Model Armor 底限設定。

  
  import com.google.cloud.modelarmor.v1.FloorSetting;
  import com.google.cloud.modelarmor.v1.FloorSettingName;
  import com.google.cloud.modelarmor.v1.GetFloorSettingRequest;
  import com.google.cloud.modelarmor.v1.ModelArmorClient;
  import java.io.IOException;
  
  public class GetProjectFloorSetting {
  
    public static void main(String[] args) throws IOException {
      // TODO(developer): Replace these variables before running the sample.
      String projectId = "your-project-id";
  
      getProjectFloorSetting(projectId);
    }
  
    public static FloorSetting getProjectFloorSetting(String projectId) throws IOException {
  
      // Initialize client that will be used to send requests. This client only
      // needs to be created once, and can be reused for multiple requests.
      try (ModelArmorClient client = ModelArmorClient.create()) {
        String name = FloorSettingName.of(projectId, "global").toString();
  
        GetFloorSettingRequest request = GetFloorSettingRequest.newBuilder().setName(name).build();
  
        FloorSetting floorSetting = client.getFloorSetting(request);
        System.out.println("Fetched floor setting for project: " + projectId);
  
        return floorSetting;
      }
    }
  }

• 查看特定資料夾的 Model Armor 底限設定。

  
  import com.google.cloud.modelarmor.v1.FloorSetting;
  import com.google.cloud.modelarmor.v1.FloorSettingName;
  import com.google.cloud.modelarmor.v1.GetFloorSettingRequest;
  import com.google.cloud.modelarmor.v1.ModelArmorClient;
  import java.io.IOException;
  
  public class GetFolderFloorSetting {
  
    public static void main(String[] args) throws IOException {
      // TODO(developer): Replace these variables before running the sample.
      String folderId = "your-folder-id";
  
      getFolderFloorSetting(folderId);
    }
  
    public static FloorSetting getFolderFloorSetting(String folderId) throws IOException {
  
      // Initialize client that will be used to send requests. This client only
      // needs to be created once, and can be reused for multiple requests.
      try (ModelArmorClient client = ModelArmorClient.create()) {
        String name = FloorSettingName.ofFolderLocationName(folderId, "global").toString();
  
        GetFloorSettingRequest request = GetFloorSettingRequest.newBuilder().setName(name).build();
  
        FloorSetting floorSetting = client.getFloorSetting(request);
        System.out.println("Fetched floor setting for folder: " + folderId);
  
        return floorSetting;
      }
    }
  }

• 查看特定機構的 Model Armor 底限設定。

  
  import com.google.cloud.modelarmor.v1.FloorSetting;
  import com.google.cloud.modelarmor.v1.FloorSettingName;
  import com.google.cloud.modelarmor.v1.GetFloorSettingRequest;
  import com.google.cloud.modelarmor.v1.ModelArmorClient;
  import java.io.IOException;
  
  public class GetOrganizationFloorSetting {
  
    public static void main(String[] args) throws IOException {
      // TODO(developer): Replace these variables before running the sample.
      String organizationId = "your-organization-id";
  
      getOrganizationFloorSetting(organizationId);
    }
  
    public static FloorSetting getOrganizationFloorSetting(String organizationId) throws IOException {
  
      // Initialize client that will be used to send requests. This client only
      // needs to be created once, and can be reused for multiple requests.
      try (ModelArmorClient client = ModelArmorClient.create()) {
        String name = FloorSettingName.ofOrganizationLocationName(organizationId, "global")
            .toString();
  
        GetFloorSettingRequest request = GetFloorSettingRequest.newBuilder().setName(name).build();
  
        FloorSetting floorSetting = client.getFloorSetting(request);
        System.out.println("Fetched floor setting for organization: " + organizationId);
  
        return floorSetting;
      }
    }
  }

Node.js

如要執行這段程式碼，請先設定 Node.js 開發環境， 然後安裝 Model Armor Node.js SDK。

• 查看特定專案的 Model Armor 底限設定。

  /**
   * TODO(developer): Uncomment these variables before running the sample.
   */
  // const projectId = 'your-project-id';
  
  const name = `projects/${projectId}/locations/global/floorSetting`;
  
  // Imports the Modelarmor library
  const {ModelArmorClient} = require('@google-cloud/modelarmor').v1;
  
  // Instantiates a client
  const modelarmorClient = new ModelArmorClient();
  
  async function getProjectFloorSettings() {
    // Construct request
    const request = {
      name,
    };
  
    // Run request
    const [response] = await modelarmorClient.getFloorSetting(request);
    return response;
  }
  
  return await getProjectFloorSettings();

• 查看特定資料夾的 Model Armor 底限設定。

  /**
   * TODO(developer): Uncomment these variables before running the sample.
   */
  // const folderId = 'your-folder-id';
  
  const name = `folders/${folderId}/locations/global/floorSetting`;
  
  // Imports the Modelarmor library
  const {ModelArmorClient} = require('@google-cloud/modelarmor').v1;
  
  // Instantiates a client
  const modelarmorClient = new ModelArmorClient();
  
  async function getFolderFloorSettings() {
    // Construct request
    const request = {
      name,
    };
  
    const [response] = await modelarmorClient.getFloorSetting(request);
    return response;
  }
  
  return await getFolderFloorSettings();

• 查看特定機構的 Model Armor 底限設定。

  /**
   * TODO(developer): Uncomment these variables before running the sample.
   */
  // const organizationId = 'your-organization-id';
  const name = `organizations/${organizationId}/locations/global/floorSetting`;
  
  // Imports the Modelarmor library
  const {ModelArmorClient} = require('@google-cloud/modelarmor').v1;
  
  // Instantiates a client
  const modelarmorClient = new ModelArmorClient();
  
  async function getOrganizationFloorSettings() {
    // Construct request
    const request = {
      name,
    };
  
    // Run request
    const [response] = await modelarmorClient.getFloorSetting(request);
    return response;
  }
  
  return await getOrganizationFloorSettings();

PHP

如要執行這段程式碼，請先設定 PHP 開發環境，然後安裝 Model Armor PHP SDK。

• 查看特定專案的 Model Armor 底限設定。

  use Google\Cloud\ModelArmor\V1\Client\ModelArmorClient;
  use Google\Cloud\ModelArmor\V1\GetFloorSettingRequest;
  
  /**
   * Gets the floor settings for a given project.
   *
   * @param string $projectId The project Id for which the floor settings is to be retrieved.
   *
   */
  function get_project_floor_settings(string $projectId): void
  {
      $client = new ModelArmorClient();
  
      $floorSettingsName = sprintf('projects/%s/locations/global/floorSetting', $projectId);
  
      $response = $client->getFloorSetting((new GetFloorSettingRequest())->setName($floorSettingsName));
  
      printf("Floor settings retrieved successfully: %s\n", $response->serializeToJsonString());
  }

• 查看特定資料夾的 Model Armor 底限設定。

  use Google\Cloud\ModelArmor\V1\Client\ModelArmorClient;
  use Google\Cloud\ModelArmor\V1\GetFloorSettingRequest;
  
  /**
   * Gets the floor settings for a given folder.
   *
   * @param string $folderId The folder Id for which the floor settings is to be retrieved.
   *
   */
  function get_folder_floor_settings(string $folderId): void
  {
      $client = new ModelArmorClient();
  
      $floorSettingsName = sprintf('folders/%s/locations/global/floorSetting', $folderId);
  
      $response = $client->getFloorSetting((new GetFloorSettingRequest())->setName($floorSettingsName));
  
      printf("Floor settings retrieved successfully: %s\n", $response->serializeToJsonString());
  }

• 查看特定機構的 Model Armor 底限設定。

  use Google\Cloud\ModelArmor\V1\Client\ModelArmorClient;
  use Google\Cloud\ModelArmor\V1\GetFloorSettingRequest;
  
  /**
   * Gets the floor settings for a given organization.
   *
   * @param string $organizationId The organization Id for which the floor settings is to be retrieved.
   *
   */
  function get_organization_floor_settings(string $organizationId): void
  {
      $client = new ModelArmorClient();
  
      $floorSettingsName = sprintf('organizations/%s/locations/global/floorSetting', $organizationId);
  
      $response = $client->getFloorSetting((new GetFloorSettingRequest())->setName($floorSettingsName));
  
      printf("Floor settings retrieved successfully: %s\n", $response->serializeToJsonString());
  }

Python

如要執行這段程式碼，請先設定 Python 開發環境，然後安裝 Model Armor Python SDK。

• 查看特定專案的 Model Armor 底限設定。

  
  from google.cloud import modelarmor_v1
  
  # Create the Model Armor client.
  client = modelarmor_v1.ModelArmorClient(transport="rest")
  
  # TODO(Developer): Uncomment below variable.
  # project_id = "YOUR_PROJECT_ID"
  
  floor_settings_name = f"projects/{project_id}/locations/global/floorSetting"
  
  # Get the project floor setting.
  response = client.get_floor_setting(
      request=modelarmor_v1.GetFloorSettingRequest(name=floor_settings_name)
  )
  
  # Print the retrieved floor setting.
  print(response)
  

• 查看特定資料夾的 Model Armor 底限設定。

  
  from google.cloud import modelarmor_v1
  
  # Create the Model Armor client.
  client = modelarmor_v1.ModelArmorClient(transport="rest")
  
  # TODO(Developer): Uncomment below variable.
  # folder_id = "YOUR_FOLDER_ID"
  
  # Prepare folder floor setting path/name
  floor_settings_name = f"folders/{folder_id}/locations/global/floorSetting"
  
  # Get the folder floor setting.
  response = client.get_floor_setting(
      request=modelarmor_v1.GetFloorSettingRequest(name=floor_settings_name)
  )
  
  # Print the retrieved floor setting.
  print(response)
  

• 查看特定機構的 Model Armor 底限設定。

  
  from google.cloud import modelarmor_v1
  
  # Create the Model Armor client.
  client = modelarmor_v1.ModelArmorClient(transport="rest")
  
  # TODO(Developer): Uncomment below variable.
  # organization_id = "YOUR_ORGANIZATION_ID"
  
  floor_settings_name = (
      f"organizations/{organization_id}/locations/global/floorSetting"
  )
  
  # Get the organization floor setting.
  response = client.get_floor_setting(
      request=modelarmor_v1.GetFloorSettingRequest(name=floor_settings_name)
  )
  
  # Print the retrieved floor setting.
  print(response)
  

更新 Model Armor 底限設定

更新 Model Armor 底限設定，即可變更範本的最低要求、反映安全性政策的異動、修正設定錯誤，或解決底限設定之間的衝突。

執行下列指令，更新 Model Armor 底限設定。

控制台

1. 前往 Google Cloud 控制台的「Model Armor」頁面。

   前往 Model Armor

2. 確認您正在查看已啟用 Model Armor 的專案。

3. 在「Model Armor」頁面中，前往「底限設定」分頁，然後按一下「設定底限設定」。

4. 更新必填欄位，然後按一下 儲存底限設定。

gcloud

   gcloud model-armor floorsettings update --full-uri=<full-uri-of-the-floorsetting>

範例指令：

       gcloud model-armor floorsettings update \
           --malicious-uri-filter-settings-enforcement=ENABLED \
           --pi-and-jailbreak-filter-settings-enforcement=DISABLED \
           --pi-and-jailbreak-filter-settings-confidence-level=LOW_AND_ABOVE \
           --basic-config-filter-enforcement=ENABLED \
           --add-rai-settings-filters='[{"confidenceLevel": "low_and_above", "filterType": "HARASSMENT"}, {"confidenceLevel": "high", "filterType": "SEXUALLY_EXPLICIT"}]' \
           --full-uri='folders/FOLDER_ID/locations/global/floorSetting' \
           --enable-floor-setting-enforcement=true

如要設定底限設定並啟用多語言偵測功能，請執行下列指令：

    gcloud model-armor floorsettings update \
        --full-uri=projects/PROJECT_ID/locations/global/floorSetting \
        --enable-multi-language-detection

更改下列內容：

• PROJECT_ID：樓層設定的專案 ID。
• FOLDER_ID：底限設定的資料夾 ID。

REST

• 更新特定專案的 Model Armor 底限設定。

  curl -X PATCH
    -d '{"filterConfig" :{"piAndJailbreakFilterSettings": { "filterEnforcement": "ENABLED"}, "maliciousUriFilterSettings": { "filterEnforcement": "ENABLED" }, "rai_settings":{"rai_filters":{"filter_type":"DANGEROUS", "confidence_level":"LOW_AND_ABOVE" }, \
    "rai_filters":{"filter_type":"HATE_SPEECH", "confidence_level":"LOW_AND_ABOVE" }, "rai_filters":{"filter_type":"HARASSMENT", "confidence_level":"LOW_AND_ABOVE" }, "rai_filters":{"filter_type":"SEXUALLY_EXPLICIT", "confidence_level":"LOW_AND_ABOVE" }}},"enableFloorSettingEnforcement":"true"}' \
    -H "Content-Type: application/json" \
    -H "Authorization: Bearer $(gcloud auth print-access-token) \
    "https://modelarmor.googleapis.com/v1/projects/PROJECT_ID/locations/global/floorSetting"

• 更新指定資料夾的 Model Armor 底限設定。

  curl -X PATCH \
    -d '{"filterConfig" :{"piAndJailbreakFilterSettings": { "filterEnforcement": "ENABLED"}, "maliciousUriFilterSettings": {"filterEnforcement": "ENABLED" }},"enableFloorSettingEnforcement":"true"}' \
    -H "Content-Type: application/json" \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    "https://modelarmor.googleapis.com/v1/folders/FOLDER_ID/locations/global/floorSetting"

• 更新特定機構的 Model Armor 底限設定。

  curl -X PATCH \
    -d '{"filterConfig" :{"piAndJailbreakFilterSettings": { "filterEnforcement": "ENABLED"}, "maliciousUriFilterSettings": {
        "filterEnforcement": "ENABLED" }},"enableFloorSettingEnforcement":"true"}' \
    -H "Content-Type: application/json" \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
        "https://modelarmor.googleapis.com/v1/organizations/ORGANIZATION_ID/locations/global/floorSetting"

更改下列內容：

• PROJECT_ID：樓層設定的專案 ID。
• FOLDER_ID：底限設定的資料夾 ID。
• ORGANIZATION_ID：底限設定的機構 ID。

注意： 如未指定提示詞注入和越獄偵測的信心水準，專案、機構或資料夾層級的信心水準預設為 LOW_AND_ABOVE。

更新指令會傳回下列回應：

{
"name": "projects/PROJECT_ID/locations/global/floorSetting",
"updateTime": "2024-12-19T15:36:21.318191Z",
"filterConfig": {
  "piAndJailbreakFilterSettings": {
    "filterEnforcement": "ENABLED"
  },
"maliciousUriFilterSettings": {
  "filterEnforcement": "ENABLED"
 }
}
}

注意： 如要停用沿用底限設定，請將 enableFloorSettingEnforcement 旗標設為 false。

C#

如要執行這段程式碼，請先設定 C# 開發環境，然後安裝 Model Armor C# SDK。

• 更新特定專案的 Model Armor 底限設定。

  using Google.Cloud.ModelArmor.V1;
  using System;
  
  public class UpdateProjectFloorSettings
  {
      public FloorSetting UpdateProjectFloorSetting(string projectId)
      {
          // Create the client
          ModelArmorClient client = ModelArmorClient.Create();
  
          // Construct the floor settings name
          string floorSettingsName = $"projects/{projectId}/locations/global/floorSetting";
  
          // Build the floor settings with your preferred filters
          // For more details on filters, please refer to the following doc:
          // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
          var raiFilter = new RaiFilterSettings.Types.RaiFilter
          {
              FilterType = RaiFilterType.HateSpeech,
              ConfidenceLevel = DetectionConfidenceLevel.High,
          };
  
          var raiFilterSettings = new RaiFilterSettings();
          raiFilterSettings.RaiFilters.Add(raiFilter);
  
          var filterConfig = new FilterConfig { RaiSettings = raiFilterSettings };
  
          var floorSetting = new FloorSetting
          {
              Name = floorSettingsName,
              FilterConfig = filterConfig,
              EnableFloorSettingEnforcement = true,
          };
  
          // Create the update request
          var updateRequest = new UpdateFloorSettingRequest { FloorSetting = floorSetting };
  
          // Update the floor settings
          FloorSetting response = client.UpdateFloorSetting(updateRequest);
  
          Console.WriteLine($"Floor setting updated: {response.Name}");
  
          return response;
      }
  }

• 更新指定資料夾的 Model Armor 底限設定。

  using Google.Cloud.ModelArmor.V1;
  using System;
  
  public class UpdateFolderFloorSettings
  {
      public FloorSetting UpdateFolderFloorSetting(string folderId)
      {
          // Create the client
          ModelArmorClient client = ModelArmorClient.Create();
  
          // Construct the floor settings name
          string floorSettingsName = $"folders/{folderId}/locations/global/floorSetting";
  
          // Build the floor settings with your preferred filters
          // For more details on filters, please refer to the following doc:
          // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
          var raiFilter = new RaiFilterSettings.Types.RaiFilter
          {
              FilterType = RaiFilterType.HateSpeech,
              ConfidenceLevel = DetectionConfidenceLevel.High,
          };
  
          var raiFilterSettings = new RaiFilterSettings();
          raiFilterSettings.RaiFilters.Add(raiFilter);
  
          var filterConfig = new FilterConfig { RaiSettings = raiFilterSettings };
  
          var floorSetting = new FloorSetting
          {
              Name = floorSettingsName,
              FilterConfig = filterConfig,
              EnableFloorSettingEnforcement = true,
          };
  
          // Create the update request
          var updateRequest = new UpdateFloorSettingRequest { FloorSetting = floorSetting };
  
          // Update the floor settings
          FloorSetting response = client.UpdateFloorSetting(updateRequest);
  
          Console.WriteLine($"Floor setting updated: {response.Name}");
  
          return response;
      }
  }

• 更新特定機構的 Model Armor 底限設定。

  using Google.Cloud.ModelArmor.V1;
  using System;
  
  public class UpdateOrganizationFloorSettings
  {
      public FloorSetting UpdateOrganizationFloorSetting(string organizationId)
      {
          // Create the client
          ModelArmorClient client = ModelArmorClient.Create();
  
          // Construct the floor settings name
          string floorSettingsName = $"organizations/{organizationId}/locations/global/floorSetting";
  
          // Build the floor settings with your preferred filters
          // For more details on filters, please refer to the following doc:
          // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
          var raiFilter = new RaiFilterSettings.Types.RaiFilter
          {
              FilterType = RaiFilterType.HateSpeech,
              ConfidenceLevel = DetectionConfidenceLevel.High,
          };
  
          var raiFilterSettings = new RaiFilterSettings();
          raiFilterSettings.RaiFilters.Add(raiFilter);
  
          var filterConfig = new FilterConfig { RaiSettings = raiFilterSettings };
  
          var floorSetting = new FloorSetting
          {
              Name = floorSettingsName,
              FilterConfig = filterConfig,
              EnableFloorSettingEnforcement = true,
          };
  
          // Create the update request
          var updateRequest = new UpdateFloorSettingRequest { FloorSetting = floorSetting };
  
          // Update the floor settings
          FloorSetting response = client.UpdateFloorSetting(updateRequest);
  
          Console.WriteLine($"Floor setting updated: {response.Name}");
  
          return response;
      }
  }

Go

如要執行這段程式碼，請先設定 Go 開發環境，然後安裝 Model Armor Go SDK。

• 更新特定專案的 Model Armor 底限設定。

  
  import (
  	"context"
  	"fmt"
  	"io"
  
  	modelarmor "cloud.google.com/go/modelarmor/apiv1"
  	modelarmorpb "cloud.google.com/go/modelarmor/apiv1/modelarmorpb"
  )
  
  // updateProjectFloorSettings updates the floor settings of a project.
  //
  // This method updates the floor settings of a project.
  //
  // w io.Writer: The writer to use for logging.
  // projectID string: The ID of the project.
  func updateProjectFloorSettings(w io.Writer, projectID string) error {
  	ctx := context.Background()
  
  	// Create the Model Armor client.
  	client, err := modelarmor.NewClient(ctx)
  	if err != nil {
  		return fmt.Errorf("failed to create client: %w", err)
  	}
  	defer client.Close()
  
  	// Prepare project floor setting path/name
  	floorSettingsName := fmt.Sprintf("projects/%s/locations/global/floorSetting", projectID)
  
  	// Update the project floor setting
  	// For more details on filters, please refer to the following doc:
  	// [https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters](https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters)
  	enableEnforcement := true
  	req := &modelarmorpb.UpdateFloorSettingRequest{
  		FloorSetting: &modelarmorpb.FloorSetting{
  			Name: floorSettingsName,
  			FilterConfig: &modelarmorpb.FilterConfig{
  				RaiSettings: &modelarmorpb.RaiFilterSettings{
  					RaiFilters: []*modelarmorpb.RaiFilterSettings_RaiFilter{
  						{
  							FilterType:      modelarmorpb.RaiFilterType_HATE_SPEECH,
  							ConfidenceLevel: modelarmorpb.DetectionConfidenceLevel_HIGH,
  						},
  					},
  				},
  			},
  			EnableFloorSettingEnforcement: &enableEnforcement,
  		},
  	}
  
  	response, err := client.UpdateFloorSetting(ctx, req)
  	if err != nil {
  		return fmt.Errorf("failed to update floor setting: %w", err)
  	}
  
  	// Print the updated config
  	fmt.Fprintf(w, "Updated project floor setting: %+v\n", response)
  
  	return nil
  }
  

• 更新指定資料夾的 Model Armor 底限設定。

  
  import (
  	"context"
  	"fmt"
  	"io"
  
  	modelarmor "cloud.google.com/go/modelarmor/apiv1"
  	modelarmorpb "cloud.google.com/go/modelarmor/apiv1/modelarmorpb"
  )
  
  // updateFolderFloorSettings updates floor settings of a folder.
  //
  // This method updates the floor settings of a folder.
  //
  // w io.Writer: The writer to use for logging.
  // folderID string: The ID of the folder.
  func updateFolderFloorSettings(w io.Writer, folderID string) error {
  	ctx := context.Background()
  
  	// Create the Model Armor client.
  	client, err := modelarmor.NewClient(ctx)
  	if err != nil {
  		return fmt.Errorf("failed to create client: %w", err)
  	}
  	defer client.Close()
  
  	// Prepare folder floor settings path/name
  	floorSettingsName := fmt.Sprintf("folders/%s/locations/global/floorSetting", folderID)
  
  	// Prepare the floor setting update
  	enableEnforcement := true
  	floorSetting := &modelarmorpb.FloorSetting{
  		Name: floorSettingsName,
  		FilterConfig: &modelarmorpb.FilterConfig{
  			RaiSettings: &modelarmorpb.RaiFilterSettings{
  				RaiFilters: []*modelarmorpb.RaiFilterSettings_RaiFilter{
  					{
  						FilterType:      modelarmorpb.RaiFilterType_HATE_SPEECH,
  						ConfidenceLevel: modelarmorpb.DetectionConfidenceLevel_HIGH,
  					},
  				},
  			},
  		},
  		EnableFloorSettingEnforcement: &enableEnforcement,
  	}
  
  	// Prepare request for updating the floor setting.
  	req := &modelarmorpb.UpdateFloorSettingRequest{
  		FloorSetting: floorSetting,
  	}
  
  	// Update the floor setting.
  	response, err := client.UpdateFloorSetting(ctx, req)
  	if err != nil {
  		return fmt.Errorf("failed to update floor setting: %w", err)
  	}
  
  	// Print the updated config
  	fmt.Fprintf(w, "Updated folder floor setting: %v\n", response)
  
  	return nil
  
  }
  

• 更新特定機構的 Model Armor 底限設定。

  
  import (
  	"context"
  	"fmt"
  	"io"
  
  	modelarmor "cloud.google.com/go/modelarmor/apiv1"
  	modelarmorpb "cloud.google.com/go/modelarmor/apiv1/modelarmorpb"
  )
  
  // updateOrganizationFloorSettings updates floor settings of an organization.
  //
  // This method updates the floor settings of an organization.
  //
  // w io.Writer: The writer to use for logging.
  // organizationID string: The ID of the organization.
  func updateOrganizationFloorSettings(w io.Writer, organizationID string) error {
  	ctx := context.Background()
  
  	// Create the Model Armor client.
  	client, err := modelarmor.NewClient(ctx)
  	if err != nil {
  		return fmt.Errorf("failed to create client: %w", err)
  	}
  	defer client.Close()
  
  	// Prepare organization floor setting path/name
  	floorSettingsName := fmt.Sprintf("organizations/%s/locations/global/floorSetting", organizationID)
  
  	// Update the organization floor setting
  	// For more details on filters, please refer to the following doc:
  	// [https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters](https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters)
  	enableEnforcement := true
  	req := &modelarmorpb.UpdateFloorSettingRequest{
  		FloorSetting: &modelarmorpb.FloorSetting{
  			Name: floorSettingsName,
  			FilterConfig: &modelarmorpb.FilterConfig{
  				RaiSettings: &modelarmorpb.RaiFilterSettings{
  					RaiFilters: []*modelarmorpb.RaiFilterSettings_RaiFilter{
  						{
  							FilterType:      modelarmorpb.RaiFilterType_HATE_SPEECH,
  							ConfidenceLevel: modelarmorpb.DetectionConfidenceLevel_HIGH,
  						},
  					},
  				},
  			},
  			EnableFloorSettingEnforcement: &enableEnforcement,
  		},
  	}
  
  	response, err := client.UpdateFloorSetting(ctx, req)
  	if err != nil {
  		return fmt.Errorf("failed to update floor setting: %w", err)
  	}
  
  	// Print the updated config
  	fmt.Fprintf(w, "Updated org floor setting: %+v\n", response)
  

Java

如要執行這段程式碼，請先設定 Java 開發環境，然後安裝 Model Armor Java SDK。

• 更新特定專案的 Model Armor 底限設定。

  
  import com.google.cloud.modelarmor.v1.DetectionConfidenceLevel;
  import com.google.cloud.modelarmor.v1.FilterConfig;
  import com.google.cloud.modelarmor.v1.FloorSetting;
  import com.google.cloud.modelarmor.v1.FloorSettingName;
  import com.google.cloud.modelarmor.v1.ModelArmorClient;
  import com.google.cloud.modelarmor.v1.RaiFilterSettings;
  import com.google.cloud.modelarmor.v1.RaiFilterSettings.RaiFilter;
  import com.google.cloud.modelarmor.v1.RaiFilterType;
  import com.google.cloud.modelarmor.v1.UpdateFloorSettingRequest;
  import com.google.protobuf.FieldMask;
  import java.io.IOException;
  import java.util.List;
  
  public class UpdateProjectFloorSetting {
  
    public static void main(String[] args) throws IOException {
      // TODO(developer): Replace these variables before running the sample.
      String projectId = "your-project-id";
  
      updateProjectFloorSetting(projectId);
    }
  
    public static FloorSetting updateProjectFloorSetting(String projectId)
        throws IOException {
  
      // Initialize client that will be used to send requests. This client only
      // needs to be created once, and can be reused for multiple requests.
      try (ModelArmorClient client = ModelArmorClient.create()) {
        String name = FloorSettingName.of(projectId, "global").toString();
  
        // For more details on filters, please refer to the following doc:
        // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
        RaiFilterSettings raiFilterSettings =
            RaiFilterSettings.newBuilder()
                .addAllRaiFilters(
                    List.of(
                        RaiFilter.newBuilder()
                            .setFilterType(RaiFilterType.HARASSMENT)
                            .setConfidenceLevel(DetectionConfidenceLevel.LOW_AND_ABOVE)
                            .build(),
                        RaiFilter.newBuilder()
                            .setFilterType(RaiFilterType.SEXUALLY_EXPLICIT)
                            .setConfidenceLevel(DetectionConfidenceLevel.HIGH)
                            .build()))
                .build();
  
        FilterConfig modelArmorFilter = FilterConfig.newBuilder()
            .setRaiSettings(raiFilterSettings)
            .build();
  
        // Create a field mask to specify which fields to update.
        // Ref: https://protobuf.dev/reference/protobuf/google.protobuf/#field-mask
        FieldMask updateMask = FieldMask.newBuilder().addPaths("filter_config.rai_settings").build();
  
        FloorSetting floorSetting = FloorSetting.newBuilder()
            .setName(name)
            .setFilterConfig(modelArmorFilter)
            .setEnableFloorSettingEnforcement(true)
            .build();
  
        UpdateFloorSettingRequest request = UpdateFloorSettingRequest.newBuilder()
            .setFloorSetting(floorSetting)
            .setUpdateMask(updateMask)
            .build();
  
        FloorSetting updatedFloorSetting = client.updateFloorSetting(request);
        System.out.println("Updated floor setting for project: " + projectId);
  
        return updatedFloorSetting;
      }
    }
  }

• 更新指定資料夾的 Model Armor 底限設定。

  
  import com.google.cloud.modelarmor.v1.DetectionConfidenceLevel;
  import com.google.cloud.modelarmor.v1.FilterConfig;
  import com.google.cloud.modelarmor.v1.FloorSetting;
  import com.google.cloud.modelarmor.v1.FloorSettingName;
  import com.google.cloud.modelarmor.v1.ModelArmorClient;
  import com.google.cloud.modelarmor.v1.RaiFilterSettings;
  import com.google.cloud.modelarmor.v1.RaiFilterSettings.RaiFilter;
  import com.google.cloud.modelarmor.v1.RaiFilterType;
  import com.google.cloud.modelarmor.v1.UpdateFloorSettingRequest;
  import com.google.protobuf.FieldMask;
  import java.io.IOException;
  import java.util.List;
  
  public class UpdateFolderFloorSetting {
  
    public static void main(String[] args) throws IOException {
      // TODO(developer): Replace these variables before running the sample.
      String folderId = "your-folder-id";
  
      updateFolderFloorSetting(folderId);
    }
  
    public static FloorSetting updateFolderFloorSetting(String folderId)
        throws IOException {
  
      // Initialize client that will be used to send requests. This client only
      // needs to be created once, and can be reused for multiple requests.
      try (ModelArmorClient client = ModelArmorClient.create()) {
        String name = FloorSettingName.ofFolderLocationName(folderId, "global").toString();
  
        // For more details on filters, please refer to the following doc:
        // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
        RaiFilterSettings raiFilterSettings =
            RaiFilterSettings.newBuilder()
                .addAllRaiFilters(
                    List.of(
                        RaiFilter.newBuilder()
                            .setFilterType(RaiFilterType.HARASSMENT)
                            .setConfidenceLevel(DetectionConfidenceLevel.LOW_AND_ABOVE)
                            .build(),
                        RaiFilter.newBuilder()
                            .setFilterType(RaiFilterType.SEXUALLY_EXPLICIT)
                            .setConfidenceLevel(DetectionConfidenceLevel.HIGH)
                            .build()))
                .build();
  
        FilterConfig modelArmorFilter = FilterConfig.newBuilder()
            .setRaiSettings(raiFilterSettings)
            .build();
  
        // Create a field mask to specify which fields to update.
        // Ref: https://protobuf.dev/reference/protobuf/google.protobuf/#field-mask
        FieldMask updateMask = FieldMask.newBuilder().addPaths("filter_config.rai_settings").build();
  
        FloorSetting floorSetting = FloorSetting.newBuilder()
            .setName(name)
            .setFilterConfig(modelArmorFilter)
            .setEnableFloorSettingEnforcement(true)
            .build();
  
        UpdateFloorSettingRequest request = UpdateFloorSettingRequest.newBuilder()
            .setFloorSetting(floorSetting)
            .setUpdateMask(updateMask)
            .build();
  
        FloorSetting updatedFloorSetting = client.updateFloorSetting(request);
        System.out.println("Updated floor setting for folder: " + folderId);
  
        return updatedFloorSetting;
      }
    }
  }

• 更新特定機構的 Model Armor 底限設定。

  
  import com.google.cloud.modelarmor.v1.DetectionConfidenceLevel;
  import com.google.cloud.modelarmor.v1.FilterConfig;
  import com.google.cloud.modelarmor.v1.FloorSetting;
  import com.google.cloud.modelarmor.v1.FloorSettingName;
  import com.google.cloud.modelarmor.v1.ModelArmorClient;
  import com.google.cloud.modelarmor.v1.RaiFilterSettings;
  import com.google.cloud.modelarmor.v1.RaiFilterSettings.RaiFilter;
  import com.google.cloud.modelarmor.v1.RaiFilterType;
  import com.google.cloud.modelarmor.v1.UpdateFloorSettingRequest;
  import com.google.protobuf.FieldMask;
  import java.io.IOException;
  import java.util.List;
  
  public class UpdateOrganizationsFloorSetting {
  
    public static void main(String[] args) throws IOException {
      // TODO(developer): Replace these variables before running the sample.
      String organizationId = "your-organization-id";
  
      updateOrganizationFloorSetting(organizationId);
    }
  
    public static FloorSetting updateOrganizationFloorSetting(String organizationId)
        throws IOException {
  
      // Initialize client that will be used to send requests. This client only
      // needs to be created once, and can be reused for multiple requests.
      try (ModelArmorClient client = ModelArmorClient.create()) {
        String name = FloorSettingName.ofOrganizationLocationName(organizationId, "global")
            .toString();
  
        // For more details on filters, please refer to the following doc:
        // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
        RaiFilterSettings raiFilterSettings =
            RaiFilterSettings.newBuilder()
                .addAllRaiFilters(
                    List.of(
                        RaiFilter.newBuilder()
                            .setFilterType(RaiFilterType.HARASSMENT)
                            .setConfidenceLevel(DetectionConfidenceLevel.LOW_AND_ABOVE)
                            .build(),
                        RaiFilter.newBuilder()
                            .setFilterType(RaiFilterType.SEXUALLY_EXPLICIT)
                            .setConfidenceLevel(DetectionConfidenceLevel.HIGH)
                            .build()))
                .build();
  
        FilterConfig modelArmorFilter = FilterConfig.newBuilder()
            .setRaiSettings(raiFilterSettings)
            .build();
  
        // Create a field mask to specify which fields to update.
        // Ref: https://protobuf.dev/reference/protobuf/google.protobuf/#field-mask
        FieldMask updateMask = FieldMask.newBuilder()
            .addPaths("filter_config.rai_settings")
            .build();
  
        FloorSetting floorSetting = FloorSetting.newBuilder()
            .setName(name)
            .setFilterConfig(modelArmorFilter)
            .setEnableFloorSettingEnforcement(true)
            .build();
  
        UpdateFloorSettingRequest request = UpdateFloorSettingRequest.newBuilder()
            .setFloorSetting(floorSetting)
            .setUpdateMask(updateMask)
            .build();
  
        FloorSetting updatedFloorSetting = client.updateFloorSetting(request);
        System.out.println("Updated floor setting for organization: " + organizationId);
  
        return updatedFloorSetting;
      }
    }
  }

Node.js

如要執行這段程式碼，請先設定 Node.js 開發環境， 然後安裝 Model Armor Node.js SDK。

• 更新特定專案的 Model Armor 底限設定。

  /**
   * TODO(developer): Uncomment these variables before running the sample.
   */
  // const projectId = 'your-project-id';
  
  const modelarmor = require('@google-cloud/modelarmor');
  const {ModelArmorClient} = modelarmor.v1;
  const {protos} = modelarmor;
  
  // Initiate client
  const client = new ModelArmorClient();
  
  async function updateProjectFloorSettings() {
    const floorSettingsName = `projects/${projectId}/locations/global/floorSetting`;
  
    // Build the floor settings with your preferred filters
    // For more details on filters, please refer to the following doc:
    // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
    const floorSetting = {
      name: floorSettingsName,
      filterConfig: {
        raiSettings: {
          raiFilters: [
            {
              filterType:
                protos.google.cloud.modelarmor.v1.RaiFilterType.HARASSMENT,
              confidenceLevel:
                protos.google.cloud.modelarmor.v1.DetectionConfidenceLevel
                  .LOW_AND_ABOVE,
            },
            {
              filterType:
                protos.google.cloud.modelarmor.v1.RaiFilterType
                  .SEXUALLY_EXPLICIT,
              confidenceLevel:
                protos.google.cloud.modelarmor.v1.DetectionConfidenceLevel
                  .LOW_AND_ABOVE,
            },
          ],
        },
      },
      enableFloorSettingEnforcement: true,
    };
  
    const request = {
      floorSetting: floorSetting,
    };
  
    const [response] = await client.updateFloorSetting(request);
    return response;
  }
  
  return await updateProjectFloorSettings();

• 更新指定資料夾的 Model Armor 底限設定。

  /**
   * TODO(developer): Uncomment these variables before running the sample.
   */
  // const folderId = 'your-folder-id';
  
  // Imports the Model Armor library
  const modelarmor = require('@google-cloud/modelarmor');
  const {ModelArmorClient} = modelarmor.v1;
  const {protos} = modelarmor;
  
  // Instantiates a client
  const client = new ModelArmorClient();
  
  async function updateFolderFloorSettings() {
    const floorSettingsName = `folders/${folderId}/locations/global/floorSetting`;
  
    // Build the floor settings with your preferred filters
    // For more details on filters, please refer to the following doc:
    // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
    const floorSetting = {
      name: floorSettingsName,
      filterConfig: {
        raiSettings: {
          raiFilters: [
            {
              filterType:
                protos.google.cloud.modelarmor.v1.RaiFilterType.HARASSMENT,
              confidenceLevel:
                protos.google.cloud.modelarmor.v1.DetectionConfidenceLevel
                  .LOW_AND_ABOVE,
            },
            {
              filterType:
                protos.google.cloud.modelarmor.v1.RaiFilterType
                  .SEXUALLY_EXPLICIT,
              confidenceLevel:
                protos.google.cloud.modelarmor.v1.DetectionConfidenceLevel
                  .LOW_AND_ABOVE,
            },
          ],
        },
      },
      enableFloorSettingEnforcement: true,
    };
  
    const request = {
      floorSetting: floorSetting,
    };
  
    const [response] = await client.updateFloorSetting(request);
    return response;
  }
  
  return await updateFolderFloorSettings();

• 更新特定機構的 Model Armor 底限設定。

  /**
   * TODO(developer): Uncomment these variables before running the sample.
   */
  // const organizationId = 'your-organization-id';
  
  const modelarmor = require('@google-cloud/modelarmor');
  const {ModelArmorClient} = modelarmor.v1;
  const {protos} = modelarmor;
  
  const client = new ModelArmorClient();
  
  async function updateOrganizationFloorSettings() {
    const floorSettingsName = `organizations/${organizationId}/locations/global/floorSetting`;
  
    // Build the floor settings with your preferred filters
    // For more details on filters, please refer to the following doc:
    // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
    const floorSetting = {
      name: floorSettingsName,
      filterConfig: {
        raiSettings: {
          raiFilters: [
            {
              filterType:
                protos.google.cloud.modelarmor.v1.RaiFilterType.HARASSMENT,
              confidenceLevel:
                protos.google.cloud.modelarmor.v1.DetectionConfidenceLevel
                  .LOW_AND_ABOVE,
            },
            {
              filterType:
                protos.google.cloud.modelarmor.v1.RaiFilterType
                  .SEXUALLY_EXPLICIT,
              confidenceLevel:
                protos.google.cloud.modelarmor.v1.DetectionConfidenceLevel
                  .LOW_AND_ABOVE,
            },
          ],
        },
      },
      enableFloorSettingEnforcement: true,
    };
  
    const request = {
      floorSetting: floorSetting,
    };
  
    const [response] = await client.updateFloorSetting(request);
    return response;
  }
  
  return await updateOrganizationFloorSettings();

PHP

如要執行這段程式碼，請先設定 PHP 開發環境，然後安裝 Model Armor PHP SDK。

• 更新特定專案的 Model Armor 底限設定。

  use Google\Cloud\ModelArmor\V1\Client\ModelArmorClient;
  use Google\Cloud\ModelArmor\V1\RaiFilterType;
  use Google\Cloud\ModelArmor\V1\DetectionConfidenceLevel;
  use Google\Cloud\ModelArmor\V1\UpdateFloorSettingRequest;
  use Google\Cloud\ModelArmor\V1\FilterConfig;
  use Google\Cloud\ModelArmor\V1\FloorSetting;
  use Google\Cloud\ModelArmor\V1\RaiFilterSettings;
  use Google\Cloud\ModelArmor\V1\RaiFilterSettings\RaiFilter;
  
  /**
   * Updates the floor settings for a given project.
   *
   * @param string $projectId The project Id for which the floor settings is to be updated.
   *
   */
  function update_project_floor_settings(string $projectId): void
  {
      $client = new ModelArmorClient();
  
      $floorSettingsName = sprintf('projects/%s/locations/global/floorSetting', $projectId);
  
      // Build the floor settings with your preferred filters
      // For more details on filters, please refer to the following doc:
      // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
  
      $raiFilterSetting = (new RaiFilterSettings())
          ->setRaiFilters([
              (new RaiFilter())
                  ->setFilterType(RaiFilterType::HATE_SPEECH)
                  ->setConfidenceLevel(DetectionConfidenceLevel::HIGH)
          ]);
  
      $filterConfig = (new FilterConfig())->setRaiSettings($raiFilterSetting);
      $floorSetting = (new FloorSetting())
          ->setName($floorSettingsName)
          ->setFilterConfig($filterConfig)
          ->setEnableFloorSettingEnforcement(true);
  
      $updateRequest = (new UpdateFloorSettingRequest())->setFloorSetting($floorSetting);
  
      $response = $client->updateFloorSetting($updateRequest);
  
      printf("Floor setting updated: %s\n", $response->getName());
  }

• 更新指定資料夾的 Model Armor 底限設定。

  use Google\Cloud\ModelArmor\V1\Client\ModelArmorClient;
  use Google\Cloud\ModelArmor\V1\RaiFilterType;
  use Google\Cloud\ModelArmor\V1\DetectionConfidenceLevel;
  use Google\Cloud\ModelArmor\V1\UpdateFloorSettingRequest;
  use Google\Cloud\ModelArmor\V1\FilterConfig;
  use Google\Cloud\ModelArmor\V1\FloorSetting;
  use Google\Cloud\ModelArmor\V1\RaiFilterSettings;
  use Google\Cloud\ModelArmor\V1\RaiFilterSettings\RaiFilter;
  
  /**
   * Updates the floor settings for a given folder.
   *
   * @param string $folderId The folder Id for which the floor settings is to be updated.
   *
   */
  function update_folder_floor_settings(string $folderId): void
  {
      $client = new ModelArmorClient();
  
      $floorSettingsName = sprintf('folders/%s/locations/global/floorSetting', $folderId);
  
      // Build the floor settings with your preferred filters
      // For more details on filters, please refer to the following doc:
      // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
  
      $raiFilterSetting = (new RaiFilterSettings())
          ->setRaiFilters([
              (new RaiFilter())
                  ->setFilterType(RaiFilterType::HATE_SPEECH)
                  ->setConfidenceLevel(DetectionConfidenceLevel::HIGH)
          ]);
  
      $filterConfig = (new FilterConfig())->setRaiSettings($raiFilterSetting);
      $floorSetting = (new FloorSetting())
          ->setName($floorSettingsName)
          ->setFilterConfig($filterConfig)
          ->setEnableFloorSettingEnforcement(true);
  
      $updateRequest = (new UpdateFloorSettingRequest())->setFloorSetting($floorSetting);
  
      $response = $client->updateFloorSetting($updateRequest);
  
      printf("Floor setting updated: %s\n", $response->getName());
  }

• 更新特定機構的 Model Armor 底限設定。

  use Google\Cloud\ModelArmor\V1\Client\ModelArmorClient;
  use Google\Cloud\ModelArmor\V1\RaiFilterType;
  use Google\Cloud\ModelArmor\V1\DetectionConfidenceLevel;
  use Google\Cloud\ModelArmor\V1\UpdateFloorSettingRequest;
  use Google\Cloud\ModelArmor\V1\FilterConfig;
  use Google\Cloud\ModelArmor\V1\FloorSetting;
  use Google\Cloud\ModelArmor\V1\RaiFilterSettings;
  use Google\Cloud\ModelArmor\V1\RaiFilterSettings\RaiFilter;
  
  /**
   * Updates the floor settings for a given organization.
   *
   * @param string $organizationId The organization Id for which the floor settings is to be updated.
   *
   */
  function update_organization_floor_settings(string $organizationId)
  {
      $client = new ModelArmorClient();
  
      $floorSettingsName = sprintf('organizations/%s/locations/global/floorSetting', $organizationId);
  
      // Build the floor settings with your preferred filters
      // For more details on filters, please refer to the following doc:
      // https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
  
      $raiFilterSetting = (new RaiFilterSettings())
          ->setRaiFilters([
              (new RaiFilter())
                  ->setFilterType(RaiFilterType::HATE_SPEECH)
                  ->setConfidenceLevel(DetectionConfidenceLevel::HIGH)
          ]);
  
      $filterConfig = (new FilterConfig())->setRaiSettings($raiFilterSetting);
      $floorSetting = (new FloorSetting())
          ->setName($floorSettingsName)
          ->setFilterConfig($filterConfig)
          ->setEnableFloorSettingEnforcement(true);
  
      $updateRequest = (new UpdateFloorSettingRequest())->setFloorSetting($floorSetting);
  
      $response = $client->updateFloorSetting($updateRequest);
  
      printf("Floor setting updated: %s\n", $response->getName());
  }

Python

如要執行這段程式碼，請先設定 Python 開發環境，然後安裝 Model Armor Python SDK。

• 更新特定專案的 Model Armor 底限設定。

  
  from google.cloud import modelarmor_v1
  
  # Create the Model Armor client.
  client = modelarmor_v1.ModelArmorClient(transport="rest")
  
  # TODO(Developer): Uncomment these variables.
  # project_id = "YOUR_PROJECT_ID"
  
  # Prepare project floor setting path/name
  floor_settings_name = f"projects/{project_id}/locations/global/floorSetting"
  
  # Update the project floor setting
  # For more details on filters, please refer to the following doc:
  # https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
  response = client.update_floor_setting(
      request=modelarmor_v1.UpdateFloorSettingRequest(
          floor_setting=modelarmor_v1.FloorSetting(
              name=floor_settings_name,
              filter_config=modelarmor_v1.FilterConfig(
                  rai_settings=modelarmor_v1.RaiFilterSettings(
                      rai_filters=[
                          modelarmor_v1.RaiFilterSettings.RaiFilter(
                              filter_type=modelarmor_v1.RaiFilterType.HATE_SPEECH,
                              confidence_level=modelarmor_v1.DetectionConfidenceLevel.HIGH,
                          )
                      ]
                  ),
              ),
              enable_floor_setting_enforcement=True,
          )
      )
  )
  # Print the updated config
  print(response)
  

• 更新指定資料夾的 Model Armor 底限設定。

  
  from google.cloud import modelarmor_v1
  
  # Create the Model Armor client.
  client = modelarmor_v1.ModelArmorClient(transport="rest")
  
  # TODO (Developer): Uncomment these variables and initialize
  # folder_id = "YOUR_FOLDER_ID"
  
  # Prepare folder floor settings path/name
  floor_settings_name = f"folders/{folder_id}/locations/global/floorSetting"
  
  # Update the folder floor setting
  # For more details on filters, please refer to the following doc:
  # https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
  response = client.update_floor_setting(
      request=modelarmor_v1.UpdateFloorSettingRequest(
          floor_setting=modelarmor_v1.FloorSetting(
              name=floor_settings_name,
              filter_config=modelarmor_v1.FilterConfig(
                  rai_settings=modelarmor_v1.RaiFilterSettings(
                      rai_filters=[
                          modelarmor_v1.RaiFilterSettings.RaiFilter(
                              filter_type=modelarmor_v1.RaiFilterType.HATE_SPEECH,
                              confidence_level=modelarmor_v1.DetectionConfidenceLevel.HIGH,
                          )
                      ]
                  ),
              ),
              enable_floor_setting_enforcement=True,
          )
      )
  )
  # Print the updated config
  print(response)
  

• 更新特定機構的 Model Armor 底限設定。

  
  from google.cloud import modelarmor_v1
  
  # Create the Model Armor client.
  client = modelarmor_v1.ModelArmorClient(transport="rest")
  
  # TODO (Developer): Uncomment these variables and initialize
  # organization_id = "YOUR_ORGANIZATION_ID"
  
  # Prepare organization floor setting path/name
  floor_settings_name = (
      f"organizations/{organization_id}/locations/global/floorSetting"
  )
  
  # Update the organization floor setting
  # For more details on filters, please refer to the following doc:
  # https://cloud.google.com/security-command-center/docs/key-concepts-model-armor#ma-filters
  response = client.update_floor_setting(
      request=modelarmor_v1.UpdateFloorSettingRequest(
          floor_setting=modelarmor_v1.FloorSetting(
              name=floor_settings_name,
              filter_config=modelarmor_v1.FilterConfig(
                  rai_settings=modelarmor_v1.RaiFilterSettings(
                      rai_filters=[
                          modelarmor_v1.RaiFilterSettings.RaiFilter(
                              filter_type=modelarmor_v1.RaiFilterType.HATE_SPEECH,
                              confidence_level=modelarmor_v1.DetectionConfidenceLevel.HIGH,
                          )
                      ]
                  ),
              ),
              enable_floor_setting_enforcement=True,
          )
      )
  )
  # Print the updated config
  print(response)
  

查看有關違反底價設定的發現項目

每項 Model Armor 發現結果都會指出底限設定違規事項。如果 Model Armor 範本未達到資源階層底限設定定義的最低安全標準，就會發生違規情況。底限設定會定義範本的最低要求。

如果發生下列任一項違反底限設定的情形，系統就會產生調查結果：

• 系統會在您設定底限設定前，建立設定較寬鬆的範本。
• 範本缺少必要篩選器。
• 範本未達到篩選器的最低信賴水準。

系統偵測到違規行為時，會在 Security Command Center 中產生嚴重程度高的發現項目 (如果您使用 Security Command Center 的 Premium 或 Enterprise 服務層級)。這項發現項目會指出違反的底限設定、不符規定的範本，以及違規詳細資料。

以下範例顯示該發現的 sourceProperties 欄位。這項違規事項與惡意 URI 篩選器有關，發生原因是 maliciousUriFilterSettings 的範本設定為「已停用」，但底限設定要求必須「已啟用」。

{
  "filterConfig": {
    "raiSettings": {
      "raiFilters": [
        {
          "filterType": "HATE_SPEECH",
          "confidenceLevel": {
            "floorSettings": "LOW_AND_ABOVE",
            "template": "MEDIUM_AND_ABOVE"
          }
        },
        {
          "filterType": "HARASSMENT",
          "confidenceLevel": {
            "floorSettings": "MEDIUM_AND_ABOVE",
            "template": "HIGH"
          }
        }
      ]
    },
    "piAndJailbreakFilterSettings": {
      "confidenceLevel": {
        "floorSettings": "LOW_AND_ABOVE",
        "template": "HIGH"
      }
    },
    "maliciousUriFilterSettings": {
      "floorSettings": "ENABLED",
      "template": "DISABLED"
    }
  }
}

後續步驟

• 進一步瞭解 Model Armor。
• 瞭解 Model Armor 範本。
• 清理提示和回覆。
• 排解 Model Armor 問題。