Google Cloud Native is in preview. Google Cloud Classic is fully supported.
google-native.dialogflow/v3.SecuritySetting
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Create security settings in the specified location.
Create SecuritySetting Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new SecuritySetting(name: string, args: SecuritySettingArgs, opts?: CustomResourceOptions);
@overload
def SecuritySetting(resource_name: str,
args: SecuritySettingArgs,
opts: Optional[ResourceOptions] = None)
@overload
def SecuritySetting(resource_name: str,
opts: Optional[ResourceOptions] = None,
display_name: Optional[str] = None,
name: Optional[str] = None,
deidentify_template: Optional[str] = None,
insights_export_settings: Optional[GoogleCloudDialogflowCxV3SecuritySettingsInsightsExportSettingsArgs] = None,
inspect_template: Optional[str] = None,
location: Optional[str] = None,
audio_export_settings: Optional[GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsArgs] = None,
project: Optional[str] = None,
purge_data_types: Optional[Sequence[SecuritySettingPurgeDataTypesItem]] = None,
redaction_scope: Optional[SecuritySettingRedactionScope] = None,
redaction_strategy: Optional[SecuritySettingRedactionStrategy] = None,
retention_strategy: Optional[SecuritySettingRetentionStrategy] = None,
retention_window_days: Optional[int] = None)
func NewSecuritySetting(ctx *Context, name string, args SecuritySettingArgs, opts ...ResourceOption) (*SecuritySetting, error)
public SecuritySetting(string name, SecuritySettingArgs args, CustomResourceOptions? opts = null)
public SecuritySetting(String name, SecuritySettingArgs args)
public SecuritySetting(String name, SecuritySettingArgs args, CustomResourceOptions options)
type: google-native:dialogflow/v3:SecuritySetting
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args SecuritySettingArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SecuritySettingArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SecuritySettingArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SecuritySettingArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SecuritySettingArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var securitySettingResource = new GoogleNative.Dialogflow.V3.SecuritySetting("securitySettingResource", new()
{
DisplayName = "string",
Name = "string",
DeidentifyTemplate = "string",
InsightsExportSettings = new GoogleNative.Dialogflow.V3.Inputs.GoogleCloudDialogflowCxV3SecuritySettingsInsightsExportSettingsArgs
{
EnableInsightsExport = false,
},
InspectTemplate = "string",
Location = "string",
AudioExportSettings = new GoogleNative.Dialogflow.V3.Inputs.GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsArgs
{
AudioExportPattern = "string",
AudioFormat = GoogleNative.Dialogflow.V3.GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsAudioFormat.AudioFormatUnspecified,
EnableAudioRedaction = false,
GcsBucket = "string",
},
Project = "string",
PurgeDataTypes = new[]
{
GoogleNative.Dialogflow.V3.SecuritySettingPurgeDataTypesItem.PurgeDataTypeUnspecified,
},
RedactionScope = GoogleNative.Dialogflow.V3.SecuritySettingRedactionScope.RedactionScopeUnspecified,
RedactionStrategy = GoogleNative.Dialogflow.V3.SecuritySettingRedactionStrategy.RedactionStrategyUnspecified,
RetentionStrategy = GoogleNative.Dialogflow.V3.SecuritySettingRetentionStrategy.RetentionStrategyUnspecified,
RetentionWindowDays = 0,
});
example, err := dialogflowv3.NewSecuritySetting(ctx, "securitySettingResource", &dialogflowv3.SecuritySettingArgs{
DisplayName: pulumi.String("string"),
Name: pulumi.String("string"),
DeidentifyTemplate: pulumi.String("string"),
InsightsExportSettings: &dialogflow.GoogleCloudDialogflowCxV3SecuritySettingsInsightsExportSettingsArgs{
EnableInsightsExport: pulumi.Bool(false),
},
InspectTemplate: pulumi.String("string"),
Location: pulumi.String("string"),
AudioExportSettings: &dialogflow.GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsArgs{
AudioExportPattern: pulumi.String("string"),
AudioFormat: dialogflowv3.GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsAudioFormatAudioFormatUnspecified,
EnableAudioRedaction: pulumi.Bool(false),
GcsBucket: pulumi.String("string"),
},
Project: pulumi.String("string"),
PurgeDataTypes: dialogflow.SecuritySettingPurgeDataTypesItemArray{
dialogflowv3.SecuritySettingPurgeDataTypesItemPurgeDataTypeUnspecified,
},
RedactionScope: dialogflowv3.SecuritySettingRedactionScopeRedactionScopeUnspecified,
RedactionStrategy: dialogflowv3.SecuritySettingRedactionStrategyRedactionStrategyUnspecified,
RetentionStrategy: dialogflowv3.SecuritySettingRetentionStrategyRetentionStrategyUnspecified,
RetentionWindowDays: pulumi.Int(0),
})
var securitySettingResource = new SecuritySetting("securitySettingResource", SecuritySettingArgs.builder()
.displayName("string")
.name("string")
.deidentifyTemplate("string")
.insightsExportSettings(GoogleCloudDialogflowCxV3SecuritySettingsInsightsExportSettingsArgs.builder()
.enableInsightsExport(false)
.build())
.inspectTemplate("string")
.location("string")
.audioExportSettings(GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsArgs.builder()
.audioExportPattern("string")
.audioFormat("AUDIO_FORMAT_UNSPECIFIED")
.enableAudioRedaction(false)
.gcsBucket("string")
.build())
.project("string")
.purgeDataTypes("PURGE_DATA_TYPE_UNSPECIFIED")
.redactionScope("REDACTION_SCOPE_UNSPECIFIED")
.redactionStrategy("REDACTION_STRATEGY_UNSPECIFIED")
.retentionStrategy("RETENTION_STRATEGY_UNSPECIFIED")
.retentionWindowDays(0)
.build());
security_setting_resource = google_native.dialogflow.v3.SecuritySetting("securitySettingResource",
display_name="string",
name="string",
deidentify_template="string",
insights_export_settings=google_native.dialogflow.v3.GoogleCloudDialogflowCxV3SecuritySettingsInsightsExportSettingsArgs(
enable_insights_export=False,
),
inspect_template="string",
location="string",
audio_export_settings=google_native.dialogflow.v3.GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsArgs(
audio_export_pattern="string",
audio_format=google_native.dialogflow.v3.GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsAudioFormat.AUDIO_FORMAT_UNSPECIFIED,
enable_audio_redaction=False,
gcs_bucket="string",
),
project="string",
purge_data_types=[google_native.dialogflow.v3.SecuritySettingPurgeDataTypesItem.PURGE_DATA_TYPE_UNSPECIFIED],
redaction_scope=google_native.dialogflow.v3.SecuritySettingRedactionScope.REDACTION_SCOPE_UNSPECIFIED,
redaction_strategy=google_native.dialogflow.v3.SecuritySettingRedactionStrategy.REDACTION_STRATEGY_UNSPECIFIED,
retention_strategy=google_native.dialogflow.v3.SecuritySettingRetentionStrategy.RETENTION_STRATEGY_UNSPECIFIED,
retention_window_days=0)
const securitySettingResource = new google_native.dialogflow.v3.SecuritySetting("securitySettingResource", {
displayName: "string",
name: "string",
deidentifyTemplate: "string",
insightsExportSettings: {
enableInsightsExport: false,
},
inspectTemplate: "string",
location: "string",
audioExportSettings: {
audioExportPattern: "string",
audioFormat: google_native.dialogflow.v3.GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsAudioFormat.AudioFormatUnspecified,
enableAudioRedaction: false,
gcsBucket: "string",
},
project: "string",
purgeDataTypes: [google_native.dialogflow.v3.SecuritySettingPurgeDataTypesItem.PurgeDataTypeUnspecified],
redactionScope: google_native.dialogflow.v3.SecuritySettingRedactionScope.RedactionScopeUnspecified,
redactionStrategy: google_native.dialogflow.v3.SecuritySettingRedactionStrategy.RedactionStrategyUnspecified,
retentionStrategy: google_native.dialogflow.v3.SecuritySettingRetentionStrategy.RetentionStrategyUnspecified,
retentionWindowDays: 0,
});
type: google-native:dialogflow/v3:SecuritySetting
properties:
audioExportSettings:
audioExportPattern: string
audioFormat: AUDIO_FORMAT_UNSPECIFIED
enableAudioRedaction: false
gcsBucket: string
deidentifyTemplate: string
displayName: string
insightsExportSettings:
enableInsightsExport: false
inspectTemplate: string
location: string
name: string
project: string
purgeDataTypes:
- PURGE_DATA_TYPE_UNSPECIFIED
redactionScope: REDACTION_SCOPE_UNSPECIFIED
redactionStrategy: REDACTION_STRATEGY_UNSPECIFIED
retentionStrategy: RETENTION_STRATEGY_UNSPECIFIED
retentionWindowDays: 0
SecuritySetting Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The SecuritySetting resource accepts the following input properties:
- Display
Name string - The human-readable name of the security settings, unique within the location.
- Audio
Export Pulumi.Settings Google Native. Dialogflow. V3. Inputs. Google Cloud Dialogflow Cx V3Security Settings Audio Export Settings - Controls audio export settings for post-conversation analytics when ingesting audio to conversations via Participants.AnalyzeContent or Participants.StreamingAnalyzeContent. If retention_strategy is set to REMOVE_AFTER_CONVERSATION or audio_export_settings.gcs_bucket is empty, audio export is disabled. If audio export is enabled, audio is recorded and saved to audio_export_settings.gcs_bucket, subject to retention policy of audio_export_settings.gcs_bucket. This setting won't effect audio input for implicit sessions via Sessions.DetectIntent or Sessions.StreamingDetectIntent.
- Deidentify
Template string - DLP deidentify template name. Use this template to define de-identification configuration for the content. The
DLP De-identify Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, Dialogflow replaces sensitive info with[redacted]
text. The template name will have one of the following formats:projects//locations//deidentifyTemplates/
ORorganizations//locations//deidentifyTemplates/
Note:deidentify_template
must be located in the same region as theSecuritySettings
. - Insights
Export Pulumi.Settings Google Native. Dialogflow. V3. Inputs. Google Cloud Dialogflow Cx V3Security Settings Insights Export Settings - Controls conversation exporting settings to Insights after conversation is completed. If retention_strategy is set to REMOVE_AFTER_CONVERSATION, Insights export is disabled no matter what you configure here.
- Inspect
Template string - DLP inspect template name. Use this template to define inspect base settings. The
DLP Inspect Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, we use the default DLP inspect config. The template name will have one of the following formats:projects//locations//inspectTemplates/
ORorganizations//locations//inspectTemplates/
Note:inspect_template
must be located in the same region as theSecuritySettings
. - Location string
- Name string
- Resource name of the settings. Required for the SecuritySettingsService.UpdateSecuritySettings method. SecuritySettingsService.CreateSecuritySettings populates the name automatically. Format:
projects//locations//securitySettings/
. - Project string
- Purge
Data List<Pulumi.Types Google Native. Dialogflow. V3. Security Setting Purge Data Types Item> - List of types of data to remove when retention settings triggers purge.
- Redaction
Scope Pulumi.Google Native. Dialogflow. V3. Security Setting Redaction Scope - Defines the data for which Dialogflow applies redaction. Dialogflow does not redact data that it does not have access to – for example, Cloud logging.
- Redaction
Strategy Pulumi.Google Native. Dialogflow. V3. Security Setting Redaction Strategy - Strategy that defines how we do redaction.
- Retention
Strategy Pulumi.Google Native. Dialogflow. V3. Security Setting Retention Strategy - Specifies the retention behavior defined by SecuritySettings.RetentionStrategy.
- Retention
Window intDays - Retains the data for the specified number of days. User must set a value lower than Dialogflow's default 365d TTL (30 days for Agent Assist traffic), higher value will be ignored and use default. Setting a value higher than that has no effect. A missing value or setting to 0 also means we use default TTL.
- Display
Name string - The human-readable name of the security settings, unique within the location.
- Audio
Export GoogleSettings Cloud Dialogflow Cx V3Security Settings Audio Export Settings Args - Controls audio export settings for post-conversation analytics when ingesting audio to conversations via Participants.AnalyzeContent or Participants.StreamingAnalyzeContent. If retention_strategy is set to REMOVE_AFTER_CONVERSATION or audio_export_settings.gcs_bucket is empty, audio export is disabled. If audio export is enabled, audio is recorded and saved to audio_export_settings.gcs_bucket, subject to retention policy of audio_export_settings.gcs_bucket. This setting won't effect audio input for implicit sessions via Sessions.DetectIntent or Sessions.StreamingDetectIntent.
- Deidentify
Template string - DLP deidentify template name. Use this template to define de-identification configuration for the content. The
DLP De-identify Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, Dialogflow replaces sensitive info with[redacted]
text. The template name will have one of the following formats:projects//locations//deidentifyTemplates/
ORorganizations//locations//deidentifyTemplates/
Note:deidentify_template
must be located in the same region as theSecuritySettings
. - Insights
Export GoogleSettings Cloud Dialogflow Cx V3Security Settings Insights Export Settings Args - Controls conversation exporting settings to Insights after conversation is completed. If retention_strategy is set to REMOVE_AFTER_CONVERSATION, Insights export is disabled no matter what you configure here.
- Inspect
Template string - DLP inspect template name. Use this template to define inspect base settings. The
DLP Inspect Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, we use the default DLP inspect config. The template name will have one of the following formats:projects//locations//inspectTemplates/
ORorganizations//locations//inspectTemplates/
Note:inspect_template
must be located in the same region as theSecuritySettings
. - Location string
- Name string
- Resource name of the settings. Required for the SecuritySettingsService.UpdateSecuritySettings method. SecuritySettingsService.CreateSecuritySettings populates the name automatically. Format:
projects//locations//securitySettings/
. - Project string
- Purge
Data []SecurityTypes Setting Purge Data Types Item - List of types of data to remove when retention settings triggers purge.
- Redaction
Scope SecuritySetting Redaction Scope - Defines the data for which Dialogflow applies redaction. Dialogflow does not redact data that it does not have access to – for example, Cloud logging.
- Redaction
Strategy SecuritySetting Redaction Strategy - Strategy that defines how we do redaction.
- Retention
Strategy SecuritySetting Retention Strategy - Specifies the retention behavior defined by SecuritySettings.RetentionStrategy.
- Retention
Window intDays - Retains the data for the specified number of days. User must set a value lower than Dialogflow's default 365d TTL (30 days for Agent Assist traffic), higher value will be ignored and use default. Setting a value higher than that has no effect. A missing value or setting to 0 also means we use default TTL.
- display
Name String - The human-readable name of the security settings, unique within the location.
- audio
Export GoogleSettings Cloud Dialogflow Cx V3Security Settings Audio Export Settings - Controls audio export settings for post-conversation analytics when ingesting audio to conversations via Participants.AnalyzeContent or Participants.StreamingAnalyzeContent. If retention_strategy is set to REMOVE_AFTER_CONVERSATION or audio_export_settings.gcs_bucket is empty, audio export is disabled. If audio export is enabled, audio is recorded and saved to audio_export_settings.gcs_bucket, subject to retention policy of audio_export_settings.gcs_bucket. This setting won't effect audio input for implicit sessions via Sessions.DetectIntent or Sessions.StreamingDetectIntent.
- deidentify
Template String - DLP deidentify template name. Use this template to define de-identification configuration for the content. The
DLP De-identify Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, Dialogflow replaces sensitive info with[redacted]
text. The template name will have one of the following formats:projects//locations//deidentifyTemplates/
ORorganizations//locations//deidentifyTemplates/
Note:deidentify_template
must be located in the same region as theSecuritySettings
. - insights
Export GoogleSettings Cloud Dialogflow Cx V3Security Settings Insights Export Settings - Controls conversation exporting settings to Insights after conversation is completed. If retention_strategy is set to REMOVE_AFTER_CONVERSATION, Insights export is disabled no matter what you configure here.
- inspect
Template String - DLP inspect template name. Use this template to define inspect base settings. The
DLP Inspect Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, we use the default DLP inspect config. The template name will have one of the following formats:projects//locations//inspectTemplates/
ORorganizations//locations//inspectTemplates/
Note:inspect_template
must be located in the same region as theSecuritySettings
. - location String
- name String
- Resource name of the settings. Required for the SecuritySettingsService.UpdateSecuritySettings method. SecuritySettingsService.CreateSecuritySettings populates the name automatically. Format:
projects//locations//securitySettings/
. - project String
- purge
Data List<SecurityTypes Setting Purge Data Types Item> - List of types of data to remove when retention settings triggers purge.
- redaction
Scope SecuritySetting Redaction Scope - Defines the data for which Dialogflow applies redaction. Dialogflow does not redact data that it does not have access to – for example, Cloud logging.
- redaction
Strategy SecuritySetting Redaction Strategy - Strategy that defines how we do redaction.
- retention
Strategy SecuritySetting Retention Strategy - Specifies the retention behavior defined by SecuritySettings.RetentionStrategy.
- retention
Window IntegerDays - Retains the data for the specified number of days. User must set a value lower than Dialogflow's default 365d TTL (30 days for Agent Assist traffic), higher value will be ignored and use default. Setting a value higher than that has no effect. A missing value or setting to 0 also means we use default TTL.
- display
Name string - The human-readable name of the security settings, unique within the location.
- audio
Export GoogleSettings Cloud Dialogflow Cx V3Security Settings Audio Export Settings - Controls audio export settings for post-conversation analytics when ingesting audio to conversations via Participants.AnalyzeContent or Participants.StreamingAnalyzeContent. If retention_strategy is set to REMOVE_AFTER_CONVERSATION or audio_export_settings.gcs_bucket is empty, audio export is disabled. If audio export is enabled, audio is recorded and saved to audio_export_settings.gcs_bucket, subject to retention policy of audio_export_settings.gcs_bucket. This setting won't effect audio input for implicit sessions via Sessions.DetectIntent or Sessions.StreamingDetectIntent.
- deidentify
Template string - DLP deidentify template name. Use this template to define de-identification configuration for the content. The
DLP De-identify Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, Dialogflow replaces sensitive info with[redacted]
text. The template name will have one of the following formats:projects//locations//deidentifyTemplates/
ORorganizations//locations//deidentifyTemplates/
Note:deidentify_template
must be located in the same region as theSecuritySettings
. - insights
Export GoogleSettings Cloud Dialogflow Cx V3Security Settings Insights Export Settings - Controls conversation exporting settings to Insights after conversation is completed. If retention_strategy is set to REMOVE_AFTER_CONVERSATION, Insights export is disabled no matter what you configure here.
- inspect
Template string - DLP inspect template name. Use this template to define inspect base settings. The
DLP Inspect Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, we use the default DLP inspect config. The template name will have one of the following formats:projects//locations//inspectTemplates/
ORorganizations//locations//inspectTemplates/
Note:inspect_template
must be located in the same region as theSecuritySettings
. - location string
- name string
- Resource name of the settings. Required for the SecuritySettingsService.UpdateSecuritySettings method. SecuritySettingsService.CreateSecuritySettings populates the name automatically. Format:
projects//locations//securitySettings/
. - project string
- purge
Data SecurityTypes Setting Purge Data Types Item[] - List of types of data to remove when retention settings triggers purge.
- redaction
Scope SecuritySetting Redaction Scope - Defines the data for which Dialogflow applies redaction. Dialogflow does not redact data that it does not have access to – for example, Cloud logging.
- redaction
Strategy SecuritySetting Redaction Strategy - Strategy that defines how we do redaction.
- retention
Strategy SecuritySetting Retention Strategy - Specifies the retention behavior defined by SecuritySettings.RetentionStrategy.
- retention
Window numberDays - Retains the data for the specified number of days. User must set a value lower than Dialogflow's default 365d TTL (30 days for Agent Assist traffic), higher value will be ignored and use default. Setting a value higher than that has no effect. A missing value or setting to 0 also means we use default TTL.
- display_
name str - The human-readable name of the security settings, unique within the location.
- audio_
export_ Googlesettings Cloud Dialogflow Cx V3Security Settings Audio Export Settings Args - Controls audio export settings for post-conversation analytics when ingesting audio to conversations via Participants.AnalyzeContent or Participants.StreamingAnalyzeContent. If retention_strategy is set to REMOVE_AFTER_CONVERSATION or audio_export_settings.gcs_bucket is empty, audio export is disabled. If audio export is enabled, audio is recorded and saved to audio_export_settings.gcs_bucket, subject to retention policy of audio_export_settings.gcs_bucket. This setting won't effect audio input for implicit sessions via Sessions.DetectIntent or Sessions.StreamingDetectIntent.
- deidentify_
template str - DLP deidentify template name. Use this template to define de-identification configuration for the content. The
DLP De-identify Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, Dialogflow replaces sensitive info with[redacted]
text. The template name will have one of the following formats:projects//locations//deidentifyTemplates/
ORorganizations//locations//deidentifyTemplates/
Note:deidentify_template
must be located in the same region as theSecuritySettings
. - insights_
export_ Googlesettings Cloud Dialogflow Cx V3Security Settings Insights Export Settings Args - Controls conversation exporting settings to Insights after conversation is completed. If retention_strategy is set to REMOVE_AFTER_CONVERSATION, Insights export is disabled no matter what you configure here.
- inspect_
template str - DLP inspect template name. Use this template to define inspect base settings. The
DLP Inspect Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, we use the default DLP inspect config. The template name will have one of the following formats:projects//locations//inspectTemplates/
ORorganizations//locations//inspectTemplates/
Note:inspect_template
must be located in the same region as theSecuritySettings
. - location str
- name str
- Resource name of the settings. Required for the SecuritySettingsService.UpdateSecuritySettings method. SecuritySettingsService.CreateSecuritySettings populates the name automatically. Format:
projects//locations//securitySettings/
. - project str
- purge_
data_ Sequence[Securitytypes Setting Purge Data Types Item] - List of types of data to remove when retention settings triggers purge.
- redaction_
scope SecuritySetting Redaction Scope - Defines the data for which Dialogflow applies redaction. Dialogflow does not redact data that it does not have access to – for example, Cloud logging.
- redaction_
strategy SecuritySetting Redaction Strategy - Strategy that defines how we do redaction.
- retention_
strategy SecuritySetting Retention Strategy - Specifies the retention behavior defined by SecuritySettings.RetentionStrategy.
- retention_
window_ intdays - Retains the data for the specified number of days. User must set a value lower than Dialogflow's default 365d TTL (30 days for Agent Assist traffic), higher value will be ignored and use default. Setting a value higher than that has no effect. A missing value or setting to 0 also means we use default TTL.
- display
Name String - The human-readable name of the security settings, unique within the location.
- audio
Export Property MapSettings - Controls audio export settings for post-conversation analytics when ingesting audio to conversations via Participants.AnalyzeContent or Participants.StreamingAnalyzeContent. If retention_strategy is set to REMOVE_AFTER_CONVERSATION or audio_export_settings.gcs_bucket is empty, audio export is disabled. If audio export is enabled, audio is recorded and saved to audio_export_settings.gcs_bucket, subject to retention policy of audio_export_settings.gcs_bucket. This setting won't effect audio input for implicit sessions via Sessions.DetectIntent or Sessions.StreamingDetectIntent.
- deidentify
Template String - DLP deidentify template name. Use this template to define de-identification configuration for the content. The
DLP De-identify Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, Dialogflow replaces sensitive info with[redacted]
text. The template name will have one of the following formats:projects//locations//deidentifyTemplates/
ORorganizations//locations//deidentifyTemplates/
Note:deidentify_template
must be located in the same region as theSecuritySettings
. - insights
Export Property MapSettings - Controls conversation exporting settings to Insights after conversation is completed. If retention_strategy is set to REMOVE_AFTER_CONVERSATION, Insights export is disabled no matter what you configure here.
- inspect
Template String - DLP inspect template name. Use this template to define inspect base settings. The
DLP Inspect Templates Reader
role is needed on the Dialogflow service identity service account (has the formservice-PROJECT_NUMBER@gcp-sa-dialogflow.iam.gserviceaccount.com
) for your agent's project. If empty, we use the default DLP inspect config. The template name will have one of the following formats:projects//locations//inspectTemplates/
ORorganizations//locations//inspectTemplates/
Note:inspect_template
must be located in the same region as theSecuritySettings
. - location String
- name String
- Resource name of the settings. Required for the SecuritySettingsService.UpdateSecuritySettings method. SecuritySettingsService.CreateSecuritySettings populates the name automatically. Format:
projects//locations//securitySettings/
. - project String
- purge
Data List<"PURGE_DATA_TYPE_UNSPECIFIED" | "DIALOGFLOW_HISTORY">Types - List of types of data to remove when retention settings triggers purge.
- redaction
Scope "REDACTION_SCOPE_UNSPECIFIED" | "REDACT_DISK_STORAGE" - Defines the data for which Dialogflow applies redaction. Dialogflow does not redact data that it does not have access to – for example, Cloud logging.
- redaction
Strategy "REDACTION_STRATEGY_UNSPECIFIED" | "REDACT_WITH_SERVICE" - Strategy that defines how we do redaction.
- retention
Strategy "RETENTION_STRATEGY_UNSPECIFIED" | "REMOVE_AFTER_CONVERSATION" - Specifies the retention behavior defined by SecuritySettings.RetentionStrategy.
- retention
Window NumberDays - Retains the data for the specified number of days. User must set a value lower than Dialogflow's default 365d TTL (30 days for Agent Assist traffic), higher value will be ignored and use default. Setting a value higher than that has no effect. A missing value or setting to 0 also means we use default TTL.
Outputs
All input properties are implicitly available as output properties. Additionally, the SecuritySetting resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Supporting Types
GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettings, GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsArgs
- Audio
Export stringPattern - Filename pattern for exported audio.
- Audio
Format Pulumi.Google Native. Dialogflow. V3. Google Cloud Dialogflow Cx V3Security Settings Audio Export Settings Audio Format - File format for exported audio file. Currently only in telephony recordings.
- Enable
Audio boolRedaction - Enable audio redaction if it is true.
- Gcs
Bucket string - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
- Audio
Export stringPattern - Filename pattern for exported audio.
- Audio
Format GoogleCloud Dialogflow Cx V3Security Settings Audio Export Settings Audio Format - File format for exported audio file. Currently only in telephony recordings.
- Enable
Audio boolRedaction - Enable audio redaction if it is true.
- Gcs
Bucket string - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
- audio
Export StringPattern - Filename pattern for exported audio.
- audio
Format GoogleCloud Dialogflow Cx V3Security Settings Audio Export Settings Audio Format - File format for exported audio file. Currently only in telephony recordings.
- enable
Audio BooleanRedaction - Enable audio redaction if it is true.
- gcs
Bucket String - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
- audio
Export stringPattern - Filename pattern for exported audio.
- audio
Format GoogleCloud Dialogflow Cx V3Security Settings Audio Export Settings Audio Format - File format for exported audio file. Currently only in telephony recordings.
- enable
Audio booleanRedaction - Enable audio redaction if it is true.
- gcs
Bucket string - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
- audio_
export_ strpattern - Filename pattern for exported audio.
- audio_
format GoogleCloud Dialogflow Cx V3Security Settings Audio Export Settings Audio Format - File format for exported audio file. Currently only in telephony recordings.
- enable_
audio_ boolredaction - Enable audio redaction if it is true.
- gcs_
bucket str - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
- audio
Export StringPattern - Filename pattern for exported audio.
- audio
Format "AUDIO_FORMAT_UNSPECIFIED" | "MULAW" | "MP3" | "OGG" - File format for exported audio file. Currently only in telephony recordings.
- enable
Audio BooleanRedaction - Enable audio redaction if it is true.
- gcs
Bucket String - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsAudioFormat, GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsAudioFormatArgs
- Audio
Format Unspecified - AUDIO_FORMAT_UNSPECIFIEDUnspecified. Do not use.
- Mulaw
- MULAWG.711 mu-law PCM with 8kHz sample rate.
- Mp3
- MP3MP3 file format.
- Ogg
- OGGOGG Vorbis.
- Google
Cloud Dialogflow Cx V3Security Settings Audio Export Settings Audio Format Audio Format Unspecified - AUDIO_FORMAT_UNSPECIFIEDUnspecified. Do not use.
- Google
Cloud Dialogflow Cx V3Security Settings Audio Export Settings Audio Format Mulaw - MULAWG.711 mu-law PCM with 8kHz sample rate.
- Google
Cloud Dialogflow Cx V3Security Settings Audio Export Settings Audio Format Mp3 - MP3MP3 file format.
- Google
Cloud Dialogflow Cx V3Security Settings Audio Export Settings Audio Format Ogg - OGGOGG Vorbis.
- Audio
Format Unspecified - AUDIO_FORMAT_UNSPECIFIEDUnspecified. Do not use.
- Mulaw
- MULAWG.711 mu-law PCM with 8kHz sample rate.
- Mp3
- MP3MP3 file format.
- Ogg
- OGGOGG Vorbis.
- Audio
Format Unspecified - AUDIO_FORMAT_UNSPECIFIEDUnspecified. Do not use.
- Mulaw
- MULAWG.711 mu-law PCM with 8kHz sample rate.
- Mp3
- MP3MP3 file format.
- Ogg
- OGGOGG Vorbis.
- AUDIO_FORMAT_UNSPECIFIED
- AUDIO_FORMAT_UNSPECIFIEDUnspecified. Do not use.
- MULAW
- MULAWG.711 mu-law PCM with 8kHz sample rate.
- MP3
- MP3MP3 file format.
- OGG
- OGGOGG Vorbis.
- "AUDIO_FORMAT_UNSPECIFIED"
- AUDIO_FORMAT_UNSPECIFIEDUnspecified. Do not use.
- "MULAW"
- MULAWG.711 mu-law PCM with 8kHz sample rate.
- "MP3"
- MP3MP3 file format.
- "OGG"
- OGGOGG Vorbis.
GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsResponse, GoogleCloudDialogflowCxV3SecuritySettingsAudioExportSettingsResponseArgs
- Audio
Export stringPattern - Filename pattern for exported audio.
- Audio
Format string - File format for exported audio file. Currently only in telephony recordings.
- Enable
Audio boolRedaction - Enable audio redaction if it is true.
- Gcs
Bucket string - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
- Audio
Export stringPattern - Filename pattern for exported audio.
- Audio
Format string - File format for exported audio file. Currently only in telephony recordings.
- Enable
Audio boolRedaction - Enable audio redaction if it is true.
- Gcs
Bucket string - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
- audio
Export StringPattern - Filename pattern for exported audio.
- audio
Format String - File format for exported audio file. Currently only in telephony recordings.
- enable
Audio BooleanRedaction - Enable audio redaction if it is true.
- gcs
Bucket String - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
- audio
Export stringPattern - Filename pattern for exported audio.
- audio
Format string - File format for exported audio file. Currently only in telephony recordings.
- enable
Audio booleanRedaction - Enable audio redaction if it is true.
- gcs
Bucket string - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
- audio_
export_ strpattern - Filename pattern for exported audio.
- audio_
format str - File format for exported audio file. Currently only in telephony recordings.
- enable_
audio_ boolredaction - Enable audio redaction if it is true.
- gcs_
bucket str - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
- audio
Export StringPattern - Filename pattern for exported audio.
- audio
Format String - File format for exported audio file. Currently only in telephony recordings.
- enable
Audio BooleanRedaction - Enable audio redaction if it is true.
- gcs
Bucket String - Cloud Storage bucket to export audio record to. Setting this field would grant the Storage Object Creator role to the Dialogflow Service Agent. API caller that tries to modify this field should have the permission of storage.buckets.setIamPolicy.
GoogleCloudDialogflowCxV3SecuritySettingsInsightsExportSettings, GoogleCloudDialogflowCxV3SecuritySettingsInsightsExportSettingsArgs
- Enable
Insights boolExport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
- Enable
Insights boolExport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
- enable
Insights BooleanExport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
- enable
Insights booleanExport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
- enable_
insights_ boolexport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
- enable
Insights BooleanExport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
GoogleCloudDialogflowCxV3SecuritySettingsInsightsExportSettingsResponse, GoogleCloudDialogflowCxV3SecuritySettingsInsightsExportSettingsResponseArgs
- Enable
Insights boolExport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
- Enable
Insights boolExport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
- enable
Insights BooleanExport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
- enable
Insights booleanExport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
- enable_
insights_ boolexport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
- enable
Insights BooleanExport - If enabled, we will automatically exports conversations to Insights and Insights runs its analyzers.
SecuritySettingPurgeDataTypesItem, SecuritySettingPurgeDataTypesItemArgs
- Purge
Data Type Unspecified - PURGE_DATA_TYPE_UNSPECIFIEDUnspecified. Do not use.
- Dialogflow
History - DIALOGFLOW_HISTORYDialogflow history. This does not include Cloud logging, which is owned by the user - not Dialogflow.
- Security
Setting Purge Data Types Item Purge Data Type Unspecified - PURGE_DATA_TYPE_UNSPECIFIEDUnspecified. Do not use.
- Security
Setting Purge Data Types Item Dialogflow History - DIALOGFLOW_HISTORYDialogflow history. This does not include Cloud logging, which is owned by the user - not Dialogflow.
- Purge
Data Type Unspecified - PURGE_DATA_TYPE_UNSPECIFIEDUnspecified. Do not use.
- Dialogflow
History - DIALOGFLOW_HISTORYDialogflow history. This does not include Cloud logging, which is owned by the user - not Dialogflow.
- Purge
Data Type Unspecified - PURGE_DATA_TYPE_UNSPECIFIEDUnspecified. Do not use.
- Dialogflow
History - DIALOGFLOW_HISTORYDialogflow history. This does not include Cloud logging, which is owned by the user - not Dialogflow.
- PURGE_DATA_TYPE_UNSPECIFIED
- PURGE_DATA_TYPE_UNSPECIFIEDUnspecified. Do not use.
- DIALOGFLOW_HISTORY
- DIALOGFLOW_HISTORYDialogflow history. This does not include Cloud logging, which is owned by the user - not Dialogflow.
- "PURGE_DATA_TYPE_UNSPECIFIED"
- PURGE_DATA_TYPE_UNSPECIFIEDUnspecified. Do not use.
- "DIALOGFLOW_HISTORY"
- DIALOGFLOW_HISTORYDialogflow history. This does not include Cloud logging, which is owned by the user - not Dialogflow.
SecuritySettingRedactionScope, SecuritySettingRedactionScopeArgs
- Redaction
Scope Unspecified - REDACTION_SCOPE_UNSPECIFIEDDon't redact any kind of data.
- Redact
Disk Storage - REDACT_DISK_STORAGEOn data to be written to disk or similar devices that are capable of holding data even if power is disconnected. This includes data that are temporarily saved on disk.
- Security
Setting Redaction Scope Redaction Scope Unspecified - REDACTION_SCOPE_UNSPECIFIEDDon't redact any kind of data.
- Security
Setting Redaction Scope Redact Disk Storage - REDACT_DISK_STORAGEOn data to be written to disk or similar devices that are capable of holding data even if power is disconnected. This includes data that are temporarily saved on disk.
- Redaction
Scope Unspecified - REDACTION_SCOPE_UNSPECIFIEDDon't redact any kind of data.
- Redact
Disk Storage - REDACT_DISK_STORAGEOn data to be written to disk or similar devices that are capable of holding data even if power is disconnected. This includes data that are temporarily saved on disk.
- Redaction
Scope Unspecified - REDACTION_SCOPE_UNSPECIFIEDDon't redact any kind of data.
- Redact
Disk Storage - REDACT_DISK_STORAGEOn data to be written to disk or similar devices that are capable of holding data even if power is disconnected. This includes data that are temporarily saved on disk.
- REDACTION_SCOPE_UNSPECIFIED
- REDACTION_SCOPE_UNSPECIFIEDDon't redact any kind of data.
- REDACT_DISK_STORAGE
- REDACT_DISK_STORAGEOn data to be written to disk or similar devices that are capable of holding data even if power is disconnected. This includes data that are temporarily saved on disk.
- "REDACTION_SCOPE_UNSPECIFIED"
- REDACTION_SCOPE_UNSPECIFIEDDon't redact any kind of data.
- "REDACT_DISK_STORAGE"
- REDACT_DISK_STORAGEOn data to be written to disk or similar devices that are capable of holding data even if power is disconnected. This includes data that are temporarily saved on disk.
SecuritySettingRedactionStrategy, SecuritySettingRedactionStrategyArgs
- Redaction
Strategy Unspecified - REDACTION_STRATEGY_UNSPECIFIEDDo not redact.
- Redact
With Service - REDACT_WITH_SERVICECall redaction service to clean up the data to be persisted.
- Security
Setting Redaction Strategy Redaction Strategy Unspecified - REDACTION_STRATEGY_UNSPECIFIEDDo not redact.
- Security
Setting Redaction Strategy Redact With Service - REDACT_WITH_SERVICECall redaction service to clean up the data to be persisted.
- Redaction
Strategy Unspecified - REDACTION_STRATEGY_UNSPECIFIEDDo not redact.
- Redact
With Service - REDACT_WITH_SERVICECall redaction service to clean up the data to be persisted.
- Redaction
Strategy Unspecified - REDACTION_STRATEGY_UNSPECIFIEDDo not redact.
- Redact
With Service - REDACT_WITH_SERVICECall redaction service to clean up the data to be persisted.
- REDACTION_STRATEGY_UNSPECIFIED
- REDACTION_STRATEGY_UNSPECIFIEDDo not redact.
- REDACT_WITH_SERVICE
- REDACT_WITH_SERVICECall redaction service to clean up the data to be persisted.
- "REDACTION_STRATEGY_UNSPECIFIED"
- REDACTION_STRATEGY_UNSPECIFIEDDo not redact.
- "REDACT_WITH_SERVICE"
- REDACT_WITH_SERVICECall redaction service to clean up the data to be persisted.
SecuritySettingRetentionStrategy, SecuritySettingRetentionStrategyArgs
- Retention
Strategy Unspecified - RETENTION_STRATEGY_UNSPECIFIEDRetains the persisted data with Dialogflow's internal default 365d TTLs.
- Remove
After Conversation - REMOVE_AFTER_CONVERSATIONRemoves data when the conversation ends. If there is no Conversation explicitly established, a default conversation ends when the corresponding Dialogflow session ends.
- Security
Setting Retention Strategy Retention Strategy Unspecified - RETENTION_STRATEGY_UNSPECIFIEDRetains the persisted data with Dialogflow's internal default 365d TTLs.
- Security
Setting Retention Strategy Remove After Conversation - REMOVE_AFTER_CONVERSATIONRemoves data when the conversation ends. If there is no Conversation explicitly established, a default conversation ends when the corresponding Dialogflow session ends.
- Retention
Strategy Unspecified - RETENTION_STRATEGY_UNSPECIFIEDRetains the persisted data with Dialogflow's internal default 365d TTLs.
- Remove
After Conversation - REMOVE_AFTER_CONVERSATIONRemoves data when the conversation ends. If there is no Conversation explicitly established, a default conversation ends when the corresponding Dialogflow session ends.
- Retention
Strategy Unspecified - RETENTION_STRATEGY_UNSPECIFIEDRetains the persisted data with Dialogflow's internal default 365d TTLs.
- Remove
After Conversation - REMOVE_AFTER_CONVERSATIONRemoves data when the conversation ends. If there is no Conversation explicitly established, a default conversation ends when the corresponding Dialogflow session ends.
- RETENTION_STRATEGY_UNSPECIFIED
- RETENTION_STRATEGY_UNSPECIFIEDRetains the persisted data with Dialogflow's internal default 365d TTLs.
- REMOVE_AFTER_CONVERSATION
- REMOVE_AFTER_CONVERSATIONRemoves data when the conversation ends. If there is no Conversation explicitly established, a default conversation ends when the corresponding Dialogflow session ends.
- "RETENTION_STRATEGY_UNSPECIFIED"
- RETENTION_STRATEGY_UNSPECIFIEDRetains the persisted data with Dialogflow's internal default 365d TTLs.
- "REMOVE_AFTER_CONVERSATION"
- REMOVE_AFTER_CONVERSATIONRemoves data when the conversation ends. If there is no Conversation explicitly established, a default conversation ends when the corresponding Dialogflow session ends.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.