TagResources(mapping=None, *, ignore_unknown_fields=False, **kwargs)If set, attaches the tags
provided to profiled resources. Tags support access
control <https://cloud.google.com/iam/docs/tags-access-control>__.
You can conditionally grant or deny access to a resource based on
whether the resource has a specific tag.
Attributes |
|
|---|---|
| Name | Description |
tag_conditions |
MutableSequence[google.cloud.dlp_v2.types.DataProfileAction.TagResources.TagCondition]
The tags to associate with different conditions. |
profile_generations_to_tag |
MutableSequence[google.cloud.dlp_v2.types.ProfileGeneration]
The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include both PROFILE_GENERATION_NEW and
PROFILE_GENERATION_UPDATE.
|
lower_data_risk_to_low |
bool
Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an `IAM deny policy |
Classes
TagCondition
TagCondition(mapping=None, *, ignore_unknown_fields=False, **kwargs)The tag to attach to profiles matching the condition. At most one
TagCondition can be specified per sensitivity level.
.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
TagValue
TagValue(mapping=None, *, ignore_unknown_fields=False, **kwargs)A value of a tag.
.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields