View Source GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2TagResources (google_api_dlp v0.50.1)
If set, attaches the [tags] (https://cloud.google.com/resource-manager/docs/tags/tags-overview) provided to profiled resources. Tags support access control. You can conditionally grant or deny access to a resource based on whether the resource has a specific tag.
Attributes
-
lowerDataRiskToLow
(type:boolean()
, default:nil
) - Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an IAM deny policy, you can deny all principals a permission if a tag value is present, mitigating the risk of the resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles. -
profileGenerationsToTag
(type:list(String.t)
, default:nil
) - The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include bothPROFILE_GENERATION_NEW
andPROFILE_GENERATION_UPDATE
. -
tagConditions
(type:list(GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2TagCondition.t)
, default:nil
) - The tags to associate with different conditions.
Summary
Functions
Unwrap a decoded JSON object into its complex fields.
Types
@type t() :: %GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2TagResources{ lowerDataRiskToLow: boolean() | nil, profileGenerationsToTag: [String.t()] | nil, tagConditions: [GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2TagCondition.t()] | nil }
Functions
Unwrap a decoded JSON object into its complex fields.