Skip to main content

Gcp/dlp

@swamp/gcp/dlpv2026.09.07.1· 29d agoMODELS
01README

Google Cloud dlp infrastructure models

02Release Notes
  • Updated: connections
03Models13
@swamp/gcp/dlp/columndataprofilesv2026.08.12.2columndataprofiles.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a columnDataProfiles
ArgumentTypeDescription
identifierstringThe name of the columnDataProfiles
fn sync(identifier?: string)
Sync columnDataProfiles state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific columnDataProfiles by name (e.g. one discovered by list)
fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List columnDataProfiles resources
ArgumentTypeDescription
filter?stringAllows filtering. Supported syntax: * Filter expressions are made up of one or more restrictions. * Restrictions can be combined by `AND` or `OR` logical operators. A sequence of restrictions implicitly uses `AND`. * A restriction has the form of `{field} {operator} {value}`. * Supported fields: - `table_data_profile_name`: The name of the related table data profile - `project_id`: The Google Cloud project ID (REQUIRED) - `dataset_id`: The BigQuery dataset ID (REQUIRED) - `table_id`: The BigQuer
orderBy?stringComma-separated list of fields to order by, followed by `asc` or `desc` postfix. This list is case insensitive. The default sorting order is ascending. Redundant space characters are insignificant. Only one order field at a time is allowed. Examples: * `project_id asc` * `table_id` * `sensitivity_level desc` Supported fields are: - `project_id`: The Google Cloud project ID. - `dataset_id`: The ID of a BigQuery dataset. - `table_id`: The ID of a BigQuery table. - `sensitivity_level`: How sensitiv
pageSize?numberSize of the page. This value can be limited by the server. If zero, server returns a page of max size 100.
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— The profile for a scanned column within a table.
@swamp/gcp/dlp/connectionsv2026.09.07.1connections.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
connection?objectRequired. The connection with new values for the relevant fields.
updateMask?stringOptional. Mask to control which fields get updated.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn create(waitForReady?: boolean)
Create a connections
ArgumentTypeDescription
waitForReady?booleanWait for the resource to reach a ready state after creation (default: true)
fn get(identifier: string)
Get a connections
ArgumentTypeDescription
identifierstringThe name of the connections
fn update(identifier?: string, waitForReady?: boolean)
Update connections attributes
ArgumentTypeDescription
identifier?stringTarget a specific connections by name (e.g. one discovered by list)
waitForReady?booleanWait for the resource to reach a ready state after update (default: true)
fn delete(identifier: string)
Delete the connections
ArgumentTypeDescription
identifierstringThe name of the connections
fn sync(identifier?: string)
Sync connections state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific connections by name (e.g. one discovered by list)
fn list(filter?: string, pageSize?: number, maxPages?: number)
List connections resources
ArgumentTypeDescription
filter?stringOptional. Supported field/value: `state` - MISSING|AVAILABLE|ERROR The syntax is based on https://google.aip.dev/160.
pageSize?numberOptional. Number of results per page, max 1000.
maxPages?numberMaximum number of pages to fetch (default: 10)
fn search(filter?: any, pageSize?: any, pageToken?: any)
search
ArgumentTypeDescription
filter?any
pageSize?any
pageToken?any

Resources

state(infinite)— A data connection to allow the DLP API to profile data in locations that requ...
@swamp/gcp/dlp/contentpoliciesv2026.09.03.1contentpolicies.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
contentPolicy?objectRequired. The content_policy with new values for the relevant fields.
contentPolicyId?stringOptional. The content policy ID can contain uppercase and lowercase letters, numbers, and hyphens; that is, it must match the regular expression: `[a-zA-Z\\d-_]+`. The maximum length is 100 characters. If empty, the system will generate a random id.
updateMask?stringOptional. Mask to control which fields get updated.
location?stringThe location for this resource (e.g., 'us', 'us-central1', 'europe-west1')
fn create()
Create a contentPolicies
fn get(identifier: string)
Get a contentPolicies
ArgumentTypeDescription
identifierstringThe name of the contentPolicies
fn update(identifier?: string)
Update contentPolicies attributes
ArgumentTypeDescription
identifier?stringTarget a specific contentPolicies by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the contentPolicies
ArgumentTypeDescription
identifierstringThe name of the contentPolicies
fn sync(identifier?: string)
Sync contentPolicies state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific contentPolicies by name (e.g. one discovered by list)
fn list(pageSize?: number, maxPages?: number)
List contentPolicies resources
ArgumentTypeDescription
pageSize?numberOptional. Number of results per page, max 1000.
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— A policy to apply to content based on its inspection findings.
@swamp/gcp/dlp/deidentifytemplatesv2026.08.12.2deidentifytemplates.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
deidentifyTemplate?objectNew DeidentifyTemplate value.
locationId?stringDeprecated. This field has no effect.
templateId?stringThe template id can contain uppercase and lowercase letters, numbers, and hyphens; that is, it must match the regular expression: `[a-zA-Z\\d-_]+`. The maximum length is 100 characters. Can be empty to allow the system to generate one.
updateMask?stringMask to control which fields get updated.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn create()
Create a deidentifyTemplates
fn get(identifier: string)
Get a deidentifyTemplates
ArgumentTypeDescription
identifierstringThe name of the deidentifyTemplates
fn update(identifier?: string)
Update deidentifyTemplates attributes
ArgumentTypeDescription
identifier?stringTarget a specific deidentifyTemplates by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the deidentifyTemplates
ArgumentTypeDescription
identifierstringThe name of the deidentifyTemplates
fn sync(identifier?: string)
Sync deidentifyTemplates state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific deidentifyTemplates by name (e.g. one discovered by list)
fn list(locationId?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List deidentifyTemplates resources
ArgumentTypeDescription
locationId?stringDeprecated. This field has no effect.
orderBy?stringComma-separated list of fields to order by, followed by `asc` or `desc` postfix. This list is case insensitive. The default sorting order is ascending. Redundant space characters are insignificant. Example: `name asc,update_time, create_time desc` Supported fields are: - `create_time`: corresponds to the time the template was created. - `update_time`: corresponds to the time the template was last updated. - `name`: corresponds to the template's name. - `display_name`: corresponds to the template
pageSize?numberSize of the page. This value can be limited by the server. If zero server returns a page of max size 100.
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— DeidentifyTemplates contains instructions on how to de-identify content. See ...
@swamp/gcp/dlp/discoveryconfigsv2026.08.12.2discoveryconfigs.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
configId?stringThe config ID can contain uppercase and lowercase letters, numbers, and hyphens; that is, it must match the regular expression: `[a-zA-Z\\d-_]+`. The maximum length is 100 characters. Can be empty to allow the system to generate one.
discoveryConfig?objectRequired. New DiscoveryConfig value.
updateMask?stringMask to control which fields get updated.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn create(waitForReady?: boolean)
Create a discoveryConfigs
ArgumentTypeDescription
waitForReady?booleanWait for the resource to reach a ready state after creation (default: true)
fn get(identifier: string)
Get a discoveryConfigs
ArgumentTypeDescription
identifierstringThe name of the discoveryConfigs
fn update(identifier?: string, waitForReady?: boolean)
Update discoveryConfigs attributes
ArgumentTypeDescription
identifier?stringTarget a specific discoveryConfigs by name (e.g. one discovered by list)
waitForReady?booleanWait for the resource to reach a ready state after update (default: true)
fn delete(identifier: string)
Delete the discoveryConfigs
ArgumentTypeDescription
identifierstringThe name of the discoveryConfigs
fn sync(identifier?: string)
Sync discoveryConfigs state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific discoveryConfigs by name (e.g. one discovered by list)
fn list(orderBy?: string, pageSize?: number, maxPages?: number)
List discoveryConfigs resources
ArgumentTypeDescription
orderBy?stringComma-separated list of config fields to order by, followed by `asc` or `desc` postfix. This list is case insensitive. The default sorting order is ascending. Redundant space characters are insignificant. Example: `name asc,update_time, create_time desc` Supported fields are: - `last_run_time`: corresponds to the last time the DiscoveryConfig ran. - `name`: corresponds to the DiscoveryConfig's name. - `status`: corresponds to DiscoveryConfig's status.
pageSize?numberSize of the page. This value can be limited by a server.
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— Configuration for discovery to scan resources for profile generation. Only on...
@swamp/gcp/dlp/dlpjobsv2026.08.12.2dlpjobs.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a dlpJobs
ArgumentTypeDescription
identifierstringThe name of the dlpJobs
fn sync(identifier?: string)
Sync dlpJobs state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific dlpJobs by name (e.g. one discovered by list)
fn list(filter?: string, locationId?: string, orderBy?: string, pageSize?: number, type?: string, maxPages?: number)
List dlpJobs resources
ArgumentTypeDescription
filter?stringAllows filtering. Supported syntax: * Filter expressions are made up of one or more restrictions. * Restrictions can be combined by `AND` or `OR` logical operators. A sequence of restrictions implicitly uses `AND`. * A restriction has the form of `{field} {operator} {value}`. * Supported fields/values for inspect jobs: - `state` - PENDING|RUNNING|CANCELED|FINISHED|FAILED - `inspected_storage` - DATASTORE|CLOUD_STORAGE|BIGQUERY - `trigger_name` - The name of the trigger that created the job. - 'e
locationId?stringDeprecated. This field has no effect.
orderBy?stringComma-separated list of fields to order by, followed by `asc` or `desc` postfix. This list is case insensitive. The default sorting order is ascending. Redundant space characters are insignificant. Example: `name asc, end_time asc, create_time desc` Supported fields are: - `create_time`: corresponds to the time the job was created. - `end_time`: corresponds to the time the job ended. - `name`: corresponds to the job's name. - `state`: corresponds to `state`
pageSize?numberThe standard list page size.
type?stringThe type of job. Defaults to `DlpJobType.INSPECT`
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— Combines all of the information about a DLP job.
@swamp/gcp/dlp/filestoredataprofilesv2026.08.12.2filestoredataprofiles.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a fileStoreDataProfiles
ArgumentTypeDescription
identifierstringThe name of the fileStoreDataProfiles
fn delete(identifier: string)
Delete the fileStoreDataProfiles
ArgumentTypeDescription
identifierstringThe name of the fileStoreDataProfiles
fn sync(identifier?: string)
Sync fileStoreDataProfiles state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific fileStoreDataProfiles by name (e.g. one discovered by list)
fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List fileStoreDataProfiles resources
ArgumentTypeDescription
filter?stringOptional. Allows filtering. Supported syntax: * Filter expressions are made up of one or more restrictions. * Restrictions can be combined by `AND` or `OR` logical operators. A sequence of restrictions implicitly uses `AND`. * A restriction has the form of `{field} {operator} {value}`. * Supported fields: - `project_id`: The Google Cloud project ID - `account_id`: The AWS account ID - `file_store_path`: The path like "gs://bucket" - `data_source_type`: The profile\
orderBy?stringOptional. Comma-separated list of fields to order by, followed by `asc` or `desc` postfix. This list is case insensitive. The default sorting order is ascending. Redundant space characters are insignificant. Only one order field at a time is allowed. Examples: * `project_id asc` * `name` * `sensitivity_level desc` Supported fields are: - `project_id`: The Google Cloud project ID. - `sensitivity_level`: How sensitive the data in a table is, at most. - `data_risk_level`: How much risk is associate
pageSize?numberOptional. Size of the page. This value can be limited by the server. If zero, server returns a page of max size 100.
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— The profile for a file store. * Cloud Storage: maps 1:1 with a bucket. * Amaz...
@swamp/gcp/dlp/infotypesv2026.08.12.2infotypes.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
fn get(identifier: string)
Get a infoTypes
ArgumentTypeDescription
identifierstringThe name of the infoTypes
fn sync(identifier?: string)
Sync infoTypes state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific infoTypes by name (e.g. one discovered by list)
fn list(filter?: string, languageCode?: string, locationId?: string, parent?: string, maxPages?: number)
List infoTypes resources
ArgumentTypeDescription
filter?stringfilter to only return infoTypes supported by certain parts of the API. Defaults to supported_by=INSPECT.
languageCode?stringBCP-47 language code for localized infoType friendly names. If omitted, or if localized strings are not available, en-US strings will be returned.
locationId?stringDeprecated. This field has no effect.
parent?stringThe parent resource name. The format of this value is as follows: `locations/{location_id}`
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— InfoType description.
@swamp/gcp/dlp/inspecttemplatesv2026.08.12.2inspecttemplates.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
inspectTemplate?objectNew InspectTemplate value.
locationId?stringDeprecated. This field has no effect.
templateId?stringThe template id can contain uppercase and lowercase letters, numbers, and hyphens; that is, it must match the regular expression: `[a-zA-Z\\d-_]+`. The maximum length is 100 characters. Can be empty to allow the system to generate one.
updateMask?stringMask to control which fields get updated.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn create()
Create a inspectTemplates
fn get(identifier: string)
Get a inspectTemplates
ArgumentTypeDescription
identifierstringThe name of the inspectTemplates
fn update(identifier?: string)
Update inspectTemplates attributes
ArgumentTypeDescription
identifier?stringTarget a specific inspectTemplates by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the inspectTemplates
ArgumentTypeDescription
identifierstringThe name of the inspectTemplates
fn sync(identifier?: string)
Sync inspectTemplates state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific inspectTemplates by name (e.g. one discovered by list)
fn list(locationId?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List inspectTemplates resources
ArgumentTypeDescription
locationId?stringDeprecated. This field has no effect.
orderBy?stringComma-separated list of fields to order by, followed by `asc` or `desc` postfix. This list is case insensitive. The default sorting order is ascending. Redundant space characters are insignificant. Example: `name asc,update_time, create_time desc` Supported fields are: - `create_time`: corresponds to the time the template was created. - `update_time`: corresponds to the time the template was last updated. - `name`: corresponds to the template's name. - `display_name`: corresponds to the template
pageSize?numberSize of the page. This value can be limited by the server. If zero server returns a page of max size 100.
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— The inspectTemplate contains a configuration (set of types of sensitive data ...
@swamp/gcp/dlp/jobtriggersv2026.08.12.2jobtriggers.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
jobTrigger?objectNew JobTrigger value.
locationId?stringDeprecated. This field has no effect.
triggerId?stringThe trigger id can contain uppercase and lowercase letters, numbers, and hyphens; that is, it must match the regular expression: `[a-zA-Z\\d-_]+`. The maximum length is 100 characters. Can be empty to allow the system to generate one.
updateMask?stringMask to control which fields get updated.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn create()
Create a jobTriggers
fn get(identifier: string)
Get a jobTriggers
ArgumentTypeDescription
identifierstringThe name of the jobTriggers
fn update(identifier?: string)
Update jobTriggers attributes
ArgumentTypeDescription
identifier?stringTarget a specific jobTriggers by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the jobTriggers
ArgumentTypeDescription
identifierstringThe name of the jobTriggers
fn sync(identifier?: string)
Sync jobTriggers state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific jobTriggers by name (e.g. one discovered by list)
fn list(filter?: string, locationId?: string, orderBy?: string, pageSize?: number, type?: string, maxPages?: number)
List jobTriggers resources
ArgumentTypeDescription
filter?stringAllows filtering. Supported syntax: * Filter expressions are made up of one or more restrictions. * Restrictions can be combined by `AND` or `OR` logical operators. A sequence of restrictions implicitly uses `AND`. * A restriction has the form of `{field} {operator} {value}`. * Supported fields/values for inspect triggers: - `status` - HEALTHY|PAUSED|CANCELLED - `inspected_storage` - DATASTORE|CLOUD_STORAGE|BIGQUERY - 'last_run_time` - RFC 3339 formatted timestamp, surrounded by quotation marks.
locationId?stringDeprecated. This field has no effect.
orderBy?stringComma-separated list of triggeredJob fields to order by, followed by `asc` or `desc` postfix. This list is case insensitive. The default sorting order is ascending. Redundant space characters are insignificant. Example: `name asc,update_time, create_time desc` Supported fields are: - `create_time`: corresponds to the time the JobTrigger was created. - `update_time`: corresponds to the time the JobTrigger was last updated. - `last_run_time`: corresponds to the last time the JobTrigger ran. - `nam
pageSize?numberSize of the page. This value can be limited by a server.
type?stringThe type of jobs. Will use `DlpJobType.INSPECT` if not set.
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— Contains a configuration to make API calls on a repeating basis. See https://...
@swamp/gcp/dlp/projectdataprofilesv2026.08.12.2projectdataprofiles.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a projectDataProfiles
ArgumentTypeDescription
identifierstringThe name of the projectDataProfiles
fn sync(identifier?: string)
Sync projectDataProfiles state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific projectDataProfiles by name (e.g. one discovered by list)
fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List projectDataProfiles resources
ArgumentTypeDescription
filter?stringAllows filtering. Supported syntax: * Filter expressions are made up of one or more restrictions. * Restrictions can be combined by `AND` or `OR` logical operators. A sequence of restrictions implicitly uses `AND`. * A restriction has the form of `{field} {operator} {value}`. * Supported fields: - `project_id`: the Google Cloud project ID - `sensitivity_level`: HIGH|MODERATE|LOW - `data_risk_level`: HIGH|MODERATE|LOW - `status_code`: an RPC status code as defined in https://github.com/googleapis
orderBy?stringComma-separated list of fields to order by, followed by `asc` or `desc` postfix. This list is case insensitive. The default sorting order is ascending. Redundant space characters are insignificant. Only one order field at a time is allowed. Examples: * `project_id` * `sensitivity_level desc` Supported fields: - `project_id`: Google Cloud project ID - `sensitivity_level`: How sensitive the data in a project is, at most - `data_risk_level`: How much risk is associated with this data - `profile_las
pageSize?numberSize of the page. This value can be limited by the server. If zero, server returns a page of max size 100.
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— An aggregated profile for this project, based on the resources profiled withi...
@swamp/gcp/dlp/storedinfotypesv2026.08.12.2storedinfotypes.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
config?objectUpdated configuration for the storedInfoType. If not provided, a new version of the storedInfoType will be created with the existing configuration.
locationId?stringDeprecated. This field has no effect.
storedInfoTypeId?stringThe storedInfoType ID can contain uppercase and lowercase letters, numbers, and hyphens; that is, it must match the regular expression: `[a-zA-Z\\d-_]+`. The maximum length is 100 characters. Can be empty to allow the system to generate one.
updateMask?stringMask to control which fields get updated.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn create()
Create a storedInfoTypes
fn get(identifier: string)
Get a storedInfoTypes
ArgumentTypeDescription
identifierstringThe name of the storedInfoTypes
fn update(identifier?: string)
Update storedInfoTypes attributes
ArgumentTypeDescription
identifier?stringTarget a specific storedInfoTypes by name (e.g. one discovered by list)
fn delete(identifier: string)
Delete the storedInfoTypes
ArgumentTypeDescription
identifierstringThe name of the storedInfoTypes
fn sync(identifier?: string)
Sync storedInfoTypes state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific storedInfoTypes by name (e.g. one discovered by list)
fn list(locationId?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List storedInfoTypes resources
ArgumentTypeDescription
locationId?stringDeprecated. This field has no effect.
orderBy?stringComma-separated list of fields to order by, followed by `asc` or `desc` postfix. This list is case insensitive. The default sorting order is ascending. Redundant space characters are insignificant. Example: `name asc, display_name, create_time desc` Supported fields are: - `create_time`: corresponds to the time the most recent version of the resource was created. - `state`: corresponds to the state of the resource. - `name`: corresponds to resource name. - `display_name`: corresponds to info typ
pageSize?numberSize of the page. This value can be limited by the server. If zero server returns a page of max size 100.
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— StoredInfoType resource message that contains information about the current v...
@swamp/gcp/dlp/tabledataprofilesv2026.08.12.2tabledataprofiles.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessToken?stringGCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?stringGCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?stringGCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?stringComma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?stringGCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?stringCustom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
parent?stringThe parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
fn get(identifier: string)
Get a tableDataProfiles
ArgumentTypeDescription
identifierstringThe name of the tableDataProfiles
fn delete(identifier: string)
Delete the tableDataProfiles
ArgumentTypeDescription
identifierstringThe name of the tableDataProfiles
fn sync(identifier?: string)
Sync tableDataProfiles state from GCP
ArgumentTypeDescription
identifier?stringTarget a specific tableDataProfiles by name (e.g. one discovered by list)
fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)
List tableDataProfiles resources
ArgumentTypeDescription
filter?stringAllows filtering. Supported syntax: * Filter expressions are made up of one or more restrictions. * Restrictions can be combined by `AND` or `OR` logical operators. A sequence of restrictions implicitly uses `AND`. * A restriction has the form of `{field} {operator} {value}`. * Supported fields: - `project_id`: The Google Cloud project ID - `dataset_id`: The BigQuery dataset ID - `table_id`: The ID of the BigQuery table - `sensitivity_level`: HIGH|MODERATE|LOW - `data_risk_level`: HIGH|MODERATE|
orderBy?stringComma-separated list of fields to order by, followed by `asc` or `desc` postfix. This list is case insensitive. The default sorting order is ascending. Redundant space characters are insignificant. Only one order field at a time is allowed. Examples: * `project_id asc` * `table_id` * `sensitivity_level desc` Supported fields are: - `project_id`: The Google Cloud project ID. - `dataset_id`: The ID of a BigQuery dataset. - `table_id`: The ID of a BigQuery table. - `sensitivity_level`: How sensitiv
pageSize?numberSize of the page. This value can be limited by the server. If zero, server returns a page of max size 100.
maxPages?numberMaximum number of pages to fetch (default: 10)

Resources

state(infinite)— The profile for a scanned table.
04Previous Versions19
2026.09.03.1
  • Updated: contentpolicies
2026.08.12.2
  • Updated: infotypes, deidentifytemplates, inspecttemplates, columndataprofiles, connections, discoveryconfigs, dlpjobs, filestoredataprofiles, jobtriggers, projectdataprofiles, storedinfotypes, tabledataprofiles, contentpolicies
2026.07.31.1
  • Updated: deidentifytemplates, inspecttemplates, discoveryconfigs, jobtriggers, contentpolicies
2026.07.29.1
  • Updated: infotypes, deidentifytemplates, inspecttemplates, columndataprofiles, connections, discoveryconfigs, dlpjobs, filestoredataprofiles, jobtriggers, projectdataprofiles, storedinfotypes, tabledataprofiles, contentpolicies
2026.07.21.4
  • Added: contentpolicies
  • Updated: inspecttemplates, discoveryconfigs, dlpjobs, filestoredataprofiles, jobtriggers, tabledataprofiles
2026.07.21.1
  • Updated: deidentifytemplates, inspecttemplates, connections, discoveryconfigs, jobtriggers, storedinfotypes, contentpolicies
2026.07.20.2
  • Added: contentpolicies
  • Updated: inspecttemplates, discoveryconfigs, dlpjobs, filestoredataprofiles, jobtriggers, tabledataprofiles

Added 1 models

2026.07.20.1
  • Updated: infotypes, deidentifytemplates, inspecttemplates, columndataprofiles, connections, discoveryconfigs, dlpjobs, filestoredataprofiles, jobtriggers, projectdataprofiles, storedinfotypes, tabledataprofiles

Removed 1 models

2026.07.19.1
  • Updated: infotypes, deidentifytemplates, inspecttemplates, columndataprofiles, connections, discoveryconfigs, dlpjobs, filestoredataprofiles, jobtriggers, projectdataprofiles, storedinfotypes, tabledataprofiles, contentpolicies
2026.07.18.2
  • Updated: infotypes, deidentifytemplates, inspecttemplates, columndataprofiles, connections, discoveryconfigs, dlpjobs, filestoredataprofiles, jobtriggers, projectdataprofiles, storedinfotypes, tabledataprofiles, contentpolicies
2026.07.17.2
  • Updated: storedinfotypes, contentpolicies
2026.07.17.1
  • Updated: deidentifytemplates, inspecttemplates, columndataprofiles, connections, discoveryconfigs, filestoredataprofiles, jobtriggers, projectdataprofiles, storedinfotypes, tabledataprofiles, contentpolicies
2026.06.27.1
  • Updated: inspecttemplates, filestoredataprofiles, jobtriggers, tabledataprofiles, contentpolicies
2026.06.15.1
  • Added: contentpolicies

Added 1 models

2026.06.08.2
  • Updated: infotypes, deidentifytemplates, inspecttemplates, columndataprofiles, connections, discoveryconfigs, dlpjobs, filestoredataprofiles, jobtriggers, projectdataprofiles, storedinfotypes, tabledataprofiles
2026.06.07.1
  • Updated: infotypes, deidentifytemplates, inspecttemplates, columndataprofiles, connections, discoveryconfigs, dlpjobs, filestoredataprofiles, jobtriggers, projectdataprofiles, storedinfotypes, tabledataprofiles
2026.05.26.1
  • Updated: inspecttemplates, dlpjobs
2026.05.25.2
  • Updated: infotypes

Modified 12 models

2026.05.24.1
  • Updated: infotypes, deidentifytemplates, inspecttemplates, columndataprofiles, connections, discoveryconfigs, dlpjobs, filestoredataprofiles, jobtriggers, projectdataprofiles, storedinfotypes, tabledataprofiles
05Stats
A
100 / 100
Downloads
14
Archive size
256.0 KB
Verified by Swamp
  • Has README or module doc2/2earned
  • README has a code example1/1earned
  • README is substantive1/1earned
  • Most symbols documented1/1earned
  • No slow types (deprecated)1/1earned
  • Dependencies pass trust audit2/2earned
  • Has description1/1earned
  • Platform support declared (or universal)2/2earned
  • License declared1/1earned
  • Verified public repository2/2earned
06Platforms
07Labels