Cx
Represents the settings related to security issues, such as data redaction and data retention. It may take hours for updates on the settings to propagate to all the related components and take effect. Multiple security settings can be configured in each location. Each agent can specify the security settings to apply, and each setting can be applied to multiple agents in the same project and location. To get more information about SecuritySettings, see:
How-to Guides
Example Usage
Dialogflowcx Security Settings Basic
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.diagflow.CxSecuritySettings;
import com.pulumi.gcp.diagflow.CxSecuritySettingsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var basicSecuritySettings = new CxSecuritySettings("basicSecuritySettings", CxSecuritySettingsArgs.builder()
.displayName("dialogflowcx-security-settings")
.location("global")
.purgeDataTypes()
.retentionWindowDays(7)
.build());
}
}Dialogflowcx Security Settings Full
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.dataloss.PreventionInspectTemplate;
import com.pulumi.gcp.dataloss.PreventionInspectTemplateArgs;
import com.pulumi.gcp.dataloss.inputs.PreventionInspectTemplateInspectConfigArgs;
import com.pulumi.gcp.dataloss.PreventionDeidentifyTemplate;
import com.pulumi.gcp.dataloss.PreventionDeidentifyTemplateArgs;
import com.pulumi.gcp.dataloss.inputs.PreventionDeidentifyTemplateDeidentifyConfigArgs;
import com.pulumi.gcp.dataloss.inputs.PreventionDeidentifyTemplateDeidentifyConfigInfoTypeTransformationsArgs;
import com.pulumi.gcp.storage.Bucket;
import com.pulumi.gcp.storage.BucketArgs;
import com.pulumi.gcp.diagflow.CxSecuritySettings;
import com.pulumi.gcp.diagflow.CxSecuritySettingsArgs;
import com.pulumi.gcp.diagflow.inputs.CxSecuritySettingsAudioExportSettingsArgs;
import com.pulumi.gcp.diagflow.inputs.CxSecuritySettingsInsightsExportSettingsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var inspect = new PreventionInspectTemplate("inspect", PreventionInspectTemplateArgs.builder()
.parent("projects/my-project-name/locations/global")
.displayName("dialogflowcx-inspect-template")
.inspectConfig(PreventionInspectTemplateInspectConfigArgs.builder()
.infoTypes(PreventionInspectTemplateInspectConfigInfoTypeArgs.builder()
.name("EMAIL_ADDRESS")
.build())
.build())
.build());
var deidentify = new PreventionDeidentifyTemplate("deidentify", PreventionDeidentifyTemplateArgs.builder()
.parent("projects/my-project-name/locations/global")
.displayName("dialogflowcx-deidentify-template")
.deidentifyConfig(PreventionDeidentifyTemplateDeidentifyConfigArgs.builder()
.infoTypeTransformations(PreventionDeidentifyTemplateDeidentifyConfigInfoTypeTransformationsArgs.builder()
.transformations(PreventionDeidentifyTemplateDeidentifyConfigInfoTypeTransformationsTransformationArgs.builder()
.primitiveTransformation(PreventionDeidentifyTemplateDeidentifyConfigInfoTypeTransformationsTransformationPrimitiveTransformationArgs.builder()
.replaceConfig(PreventionDeidentifyTemplateDeidentifyConfigInfoTypeTransformationsTransformationPrimitiveTransformationReplaceConfigArgs.builder()
.newValue(PreventionDeidentifyTemplateDeidentifyConfigInfoTypeTransformationsTransformationPrimitiveTransformationReplaceConfigNewValueArgs.builder()
.stringValue("[REDACTED]")
.build())
.build())
.build())
.build())
.build())
.build())
.build());
var bucket = new Bucket("bucket", BucketArgs.builder()
.location("US")
.uniformBucketLevelAccess(true)
.build());
var basicSecuritySettings = new CxSecuritySettings("basicSecuritySettings", CxSecuritySettingsArgs.builder()
.displayName("dialogflowcx-security-settings")
.location("global")
.redactionStrategy("REDACT_WITH_SERVICE")
.redactionScope("REDACT_DISK_STORAGE")
.inspectTemplate(inspect.id())
.deidentifyTemplate(deidentify.id())
.purgeDataTypes("DIALOGFLOW_HISTORY")
.audioExportSettings(CxSecuritySettingsAudioExportSettingsArgs.builder()
.gcsBucket(bucket.id())
.audioExportPattern("export")
.enableAudioRedaction(true)
.audioFormat("OGG")
.build())
.insightsExportSettings(CxSecuritySettingsInsightsExportSettingsArgs.builder()
.enableInsightsExport(true)
.build())
.retentionStrategy("REMOVE_AFTER_CONVERSATION")
.build());
}
}Import
SecuritySettings can be imported using any of these accepted formats
$ pulumi import gcp:diagflow/cxSecuritySettings:CxSecuritySettings default projects/{{project}}/locations/{{location}}/securitySettings/{{name}}$ pulumi import gcp:diagflow/cxSecuritySettings:CxSecuritySettings default {{project}}/{{location}}/{{name}}$ pulumi import gcp:diagflow/cxSecuritySettings:CxSecuritySettings default {{location}}/{{name}}Constructors
Properties
Controls audio export settings for post-conversation analytics when ingesting audio to conversations. If retention_strategy is set to REMOVE_AFTER_CONVERSATION or gcs_bucket is empty, audio export is disabled. If audio export is enabled, audio is recorded and saved to gcs_bucket, subject to retention policy of gcs_bucket. This setting won't effect audio input for implicit sessions via Sessions.DetectIntent. Structure is documented below.
DLP deidentify template name. Use this template to define de-identification configuration for the content. If empty, Dialogflow replaces sensitive info with redacted text. Note: deidentifyTemplate must be located in the same region as the SecuritySettings. Format: projects/
The human-readable name of the security settings, unique within the location.
Controls conversation exporting settings to Insights after conversation is completed. If retentionStrategy is set to REMOVE_AFTER_CONVERSATION, Insights export is disabled no matter what you configure here. Structure is documented below.
DLP inspect template name. Use this template to define inspect base settings. If empty, we use the default DLP inspect config. Note: inspectTemplate must be located in the same region as the SecuritySettings. Format: projects/
The location these settings are located in. Settings can only be applied to an agent in the same location. See Available Regions for a list of supported locations.
List of types of data to remove when retention settings triggers purge. Each value may be one of: DIALOGFLOW_HISTORY.
Defines what types of data to redact. If not set, defaults to not redacting any kind of data.
Defines how we redact data. If not set, defaults to not redacting.
Defines how long we retain persisted data that contains sensitive info. Only one of retention_window_days and retention_strategy may be set.
Retains the data for the specified number of days. User must set a value lower than Dialogflow's default 365d TTL (30 days for Agent Assist traffic), higher value will be ignored and use default. Setting a value higher than that has no effect. A missing value or setting to 0 also means we use default TTL. Only one of retention_window_days and retention_strategy may be set.