feat: org-level connection bindings

Google APIs · copybara-github · commit e1d378cf6030 · 2024-07-29T14:06:38.000-07:00
feat: gRPC config for get, list, and delete FileStoreDataProfiles
feat: add refresh frequency for data profiling
docs: small improvements

PiperOrigin-RevId: 657319510
diff --git a/google/privacy/dlp/v2/dlp.proto b/google/privacy/dlp/v2/dlp.proto
@@ -160,7 +160,7 @@ service DlpService {
   rpc CreateInspectTemplate(CreateInspectTemplateRequest)
       returns (InspectTemplate) {
     option (google.api.http) = {
-      post: "/v2/{parent=organizations/*}/inspectTemplates"
+      post: "/v2/{parent=projects/*/locations/*}/inspectTemplates"
       body: "*"
       additional_bindings {
         post: "/v2/{parent=organizations/*/locations/*}/inspectTemplates"
@@ -171,7 +171,7 @@ service DlpService {
         body: "*"
       }
       additional_bindings {
-        post: "/v2/{parent=projects/*/locations/*}/inspectTemplates"
+        post: "/v2/{parent=organizations/*}/inspectTemplates"
         body: "*"
       }
     };
@@ -185,7 +185,7 @@ service DlpService {
   rpc UpdateInspectTemplate(UpdateInspectTemplateRequest)
       returns (InspectTemplate) {
     option (google.api.http) = {
-      patch: "/v2/{name=organizations/*/inspectTemplates/*}"
+      patch: "/v2/{name=projects/*/locations/*/inspectTemplates/*}"
       body: "*"
       additional_bindings {
         patch: "/v2/{name=organizations/*/locations/*/inspectTemplates/*}"
@@ -196,7 +196,7 @@ service DlpService {
         body: "*"
       }
       additional_bindings {
-        patch: "/v2/{name=projects/*/locations/*/inspectTemplates/*}"
+        patch: "/v2/{name=organizations/*/inspectTemplates/*}"
         body: "*"
       }
     };
@@ -209,13 +209,13 @@ service DlpService {
   // to learn more.
   rpc GetInspectTemplate(GetInspectTemplateRequest) returns (InspectTemplate) {
     option (google.api.http) = {
-      get: "/v2/{name=organizations/*/inspectTemplates/*}"
+      get: "/v2/{name=projects/*/locations/*/inspectTemplates/*}"
       additional_bindings {
         get: "/v2/{name=organizations/*/locations/*/inspectTemplates/*}"
       }
       additional_bindings { get: "/v2/{name=projects/*/inspectTemplates/*}" }
       additional_bindings {
-        get: "/v2/{name=projects/*/locations/*/inspectTemplates/*}"
+        get: "/v2/{name=organizations/*/inspectTemplates/*}"
       }
     };
     option (google.api.method_signature) = "name";
@@ -228,13 +228,13 @@ service DlpService {
   rpc ListInspectTemplates(ListInspectTemplatesRequest)
       returns (ListInspectTemplatesResponse) {
     option (google.api.http) = {
-      get: "/v2/{parent=organizations/*}/inspectTemplates"
+      get: "/v2/{parent=projects/*/locations/*}/inspectTemplates"
       additional_bindings {
         get: "/v2/{parent=organizations/*/locations/*}/inspectTemplates"
       }
       additional_bindings { get: "/v2/{parent=projects/*}/inspectTemplates" }
       additional_bindings {
-        get: "/v2/{parent=projects/*/locations/*}/inspectTemplates"
+        get: "/v2/{parent=organizations/*}/inspectTemplates"
       }
     };
     option (google.api.method_signature) = "parent";
@@ -247,13 +247,13 @@ service DlpService {
   rpc DeleteInspectTemplate(DeleteInspectTemplateRequest)
       returns (google.protobuf.Empty) {
     option (google.api.http) = {
-      delete: "/v2/{name=organizations/*/inspectTemplates/*}"
+      delete: "/v2/{name=projects/*/locations/*/inspectTemplates/*}"
       additional_bindings {
         delete: "/v2/{name=organizations/*/locations/*/inspectTemplates/*}"
       }
       additional_bindings { delete: "/v2/{name=projects/*/inspectTemplates/*}" }
       additional_bindings {
-        delete: "/v2/{name=projects/*/locations/*/inspectTemplates/*}"
+        delete: "/v2/{name=organizations/*/inspectTemplates/*}"
       }
     };
     option (google.api.method_signature) = "name";
@@ -898,6 +898,10 @@ service DlpService {
     option (google.api.http) = {
       post: "/v2/{parent=projects/*/locations/*}/connections"
       body: "*"
+      additional_bindings {
+        post: "/v2/{parent=organizations/*/locations/*}/connections"
+        body: "*"
+      }
     };
     option (google.api.method_signature) = "parent, connection";
   }
@@ -906,15 +910,22 @@ service DlpService {
   rpc GetConnection(GetConnectionRequest) returns (Connection) {
     option (google.api.http) = {
       get: "/v2/{name=projects/*/locations/*/connections/*}"
+      additional_bindings {
+        get: "/v2/{name=organizations/*/locations/*/connections/*}"
+      }
     };
     option (google.api.method_signature) = "name";
   }
 
-  // Lists Connections in a parent.
+  // Lists Connections in a parent. Use SearchConnections to see all connections
+  // within an organization.
   rpc ListConnections(ListConnectionsRequest)
       returns (ListConnectionsResponse) {
     option (google.api.http) = {
       get: "/v2/{parent=projects/*/locations/*}/connections"
+      additional_bindings {
+        get: "/v2/{parent=organizations/*/locations/*}/connections"
+      }
     };
     option (google.api.method_signature) = "parent";
   }
@@ -936,6 +947,9 @@ service DlpService {
       returns (google.protobuf.Empty) {
     option (google.api.http) = {
       delete: "/v2/{name=projects/*/locations/*/connections/*}"
+      additional_bindings {
+        delete: "/v2/{name=organizations/*/locations/*/connections/*}"
+      }
     };
     option (google.api.method_signature) = "name";
   }
@@ -945,6 +959,10 @@ service DlpService {
     option (google.api.http) = {
       patch: "/v2/{name=projects/*/locations/*/connections/*}"
       body: "*"
+      additional_bindings {
+        patch: "/v2/{name=organizations/*/locations/*/connections/*}"
+        body: "*"
+      }
     };
     option (google.api.method_signature) = "name";
   }
@@ -5246,6 +5264,10 @@ message DiscoveryGenerationCadence {
   // defined by the `InspectTemplate` change.
   // If not set, changing the template will not cause a data profile to update.
   DiscoveryInspectTemplateModifiedCadence inspect_template_modified_cadence = 3;
+
+  // Frequency at which profiles should be updated, regardless of whether the
+  // underlying resource has changed. Defaults to never.
+  DataProfileUpdateFrequency refresh_frequency = 4;
 }
 
 // The cadence at which to update data profiles when a table is modified.
@@ -5734,7 +5756,7 @@ message DiscoveryStartingLocation {
     // The ID of an organization to scan.
     int64 organization_id = 1;
 
-    // The ID of the folder within an organization to scan.
+    // The ID of the folder within an organization to be scanned.
     int64 folder_id = 2;
   }
 }
@@ -7637,8 +7659,15 @@ message DataProfilePubSubMessage {
 
 // Request message for CreateConnection.
 message CreateConnectionRequest {
-  // Required. Parent resource name in the format:
-  // `projects/{project}/locations/{location}`.
+  // Required. Parent resource name.
+  //
+  // The format of this value varies depending on the scope of the request
+  // (project or organization):
+  //
+  // + Projects scope:
+  //   `projects/PROJECT_ID/locations/LOCATION_ID`
+  // + Organizations scope:
+  //   `organizations/ORG_ID/locations/LOCATION_ID`
   string parent = 1 [
     (google.api.field_behavior) = REQUIRED,
     (google.api.resource_reference) = {
@@ -7662,8 +7691,9 @@ message GetConnectionRequest {
 
 // Request message for ListConnections.
 message ListConnectionsRequest {
-  // Required. Parent name, for example:
-  // `projects/project-id/locations/global`.
+  // Required. Resource name of the organization or project, for
+  // example, `organizations/433245324/locations/europe` or
+  // `projects/project-id/locations/asia`.
   string parent = 1 [
     (google.api.field_behavior) = REQUIRED,
     (google.api.resource_reference) = {
@@ -7684,8 +7714,9 @@ message ListConnectionsRequest {
 
 // Request message for SearchConnections.
 message SearchConnectionsRequest {
-  // Required. Parent name, typically an organization, without location.
-  // For example: `organizations/12345678`.
+  // Required. Resource name of the organization or project with a wildcard
+  // location, for example, `organizations/433245324/locations/-` or
+  // `projects/project-id/locations/-`.
   string parent = 1 [
     (google.api.field_behavior) = REQUIRED,
     (google.api.resource_reference) = {
@@ -7758,6 +7789,7 @@ message DeleteConnectionRequest {
 message Connection {
   option (google.api.resource) = {
     type: "dlp.googleapis.com/Connection"
+    pattern: "organizations/{organization}/locations/{location}/connections/{connection}"
     pattern: "projects/{project}/locations/{location}/connections/{connection}"
   };
 
@@ -7891,7 +7923,7 @@ message DataSourceType {
 // Message used to identify file cluster type being profiled.
 message FileClusterType {
   // Cluster type. Each cluster corresponds to a set of file types.
-  // Over time new types may be added.
+  // Over time, new types may be added and files may move between clusters.
   enum Cluster {
     // Unused.
     CLUSTER_UNSPECIFIED = 0;
diff --git a/google/privacy/dlp/v2/dlp_grpc_service_config.json b/google/privacy/dlp/v2/dlp_grpc_service_config.json
@@ -117,6 +117,18 @@
         {
           "service": "google.privacy.dlp.v2.DlpService",
           "method": "GetColumnDataProfile"
+        },
+        {
+          "service": "google.privacy.dlp.v2.DlpService",
+          "method": "GetFileStoreDataProfile"
+        },
+        {
+          "service": "google.privacy.dlp.v2.DlpService",
+          "method": "ListFileStoreDataProfiles"
+        },
+        {
+          "service": "google.privacy.dlp.v2.DlpService",
+          "method": "DeleteFileStoreDataProfile"
         }
       ],
       "timeout": "300s",
