Regulatory support in Cloud Logging

This document describes the features, configurations and APIs in Cloud Logging that align with the controls for supported control packages. This document assumes that you're using Assured Workloads.

Data Boundary for ITAR

Supported services

The following table lists the Cloud Logging APIs and versions that meet the requirements of Data Boundary for ITAR.

Service Version Status
logging.googleapis.com v2 SUPPORTED

Compliance supported regions

Cloud Logging is available for Data Boundary for ITAR in the following Google Cloud regions:

  • us-central1
  • us-central1
  • us-central2
  • us-east1
  • us-east4
  • us-east5
  • us-south1
  • us-west1
  • us-west2
  • us-west3
  • us-west4
  • us-central1
  • us-central2
  • us-east1
  • us-east4
  • us-east5
  • us-south1
  • us-west1
  • us-west2
  • us-west3
  • us-west4

API fields for sensitive data

Resource: No resource

The following table specifies the API resources and fields that are designed to handle data that is protected under Data Boundary for ITAR.

API Method Protected fields

Service: logging.googleapis.com

REST API: POST /v2/aggregations:read

RPC methods:

  • google.logging.v2.LoggingServiceV2.AggregateLogs
  • filter

Service: logging.googleapis.com

REST API: POST /v2/data:query

RPC methods:

  • google.logging.v2.AnalyticsService.QueryData
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Service: logging.googleapis.com

REST API: POST /v2/data:queryLocal

RPC methods:

  • google.logging.v2.AnalyticsService.QueryDataLocal
  • query.querySteps.queryBuilderQueryStep.parameters.intArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.intValue
  • query.querySteps.queryBuilderQueryStep.parameters.stringArray.values
  • query.querySteps.queryBuilderQueryStep.parameters.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.fieldSources.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSource.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.fieldSourceValue.projectedField.regexExtraction
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.boolValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.nullValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.numberValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.stringValue
  • query.querySteps.queryBuilderQueryStep.queryBuilder.filter.leafPredicate.literalValue.structValue.fields.key
  • query.querySteps.queryBuilderQueryStep.queryBuilder.orderBys.fieldSource.projectedField.regexExtraction
  • query.querySteps.sqlQueryStep.parameters.intArray.values
  • query.querySteps.sqlQueryStep.parameters.intValue
  • query.querySteps.sqlQueryStep.parameters.stringArray.values
  • query.querySteps.sqlQueryStep.parameters.stringValue
  • query.querySteps.sqlQueryStep.sqlQuery

Service: logging.googleapis.com

REST API: POST /v2/data:querySync

RPC methods:

  • google.logging.v2.AnalyticsService.QueryDataSync
  • sqlQueryStep.parameters.intArray.values
  • sqlQueryStep.parameters.intValue
  • sqlQueryStep.parameters.stringArray.values
  • sqlQueryStep.parameters.stringValue
  • sqlQueryStep.sqlQuery

Service: logging.googleapis.com

REST API: POST /v2/entries:copy

RPC methods:

  • google.logging.v2.ConfigServiceV2.CopyLogEntries
  • filter

Service: logging.googleapis.com

REST API: POST /v2/entries:list

RPC methods:

  • google.logging.v2.LoggingServiceV2.ListLogEntries
  • filter

Service: logging.googleapis.com

REST API: POST /v2/entries:readLegacy

RPC methods:

  • google.logging.v2.LoggingServiceV2.ReadLogEntriesLegacy
  • filter

Service: logging.googleapis.com

REST API: POST /v2/entries:redact

RPC methods:

  • google.logging.v2.ConfigServiceV2.RedactLogEntries
  • filter

Service: logging.googleapis.com

REST API: POST /v2/entries:write

RPC methods:

  • google.logging.v2.LoggingServiceV2.WriteLogEntries
  • entries.jsonPayload.fields.key
  • entries.jsonPayload.fields.value.boolValue
  • entries.jsonPayload.fields.value.nullValue
  • entries.jsonPayload.fields.value.numberValue
  • entries.jsonPayload.fields.value.stringValue
  • entries.protoPayload.typeUrl
  • entries.protoPayload.value
  • entries.sourceLocation.file
  • entries.sourceLocation.function
  • entries.textPayload

Service: logging.googleapis.com

REST API: POST /v2/generation:generateQuery

RPC methods:

  • google.logging.v2.AnalyticsService.GenerateQuery
  • prompt

Service: logging.googleapis.com

REST API: POST /v2/query:extractQueryResources

RPC methods:

  • google.logging.v2.AnalyticsService.ExtractQueryResources
  • query

Service: logging.googleapis.com

REST API: POST /v2/query:translate

RPC methods:

  • google.logging.v2.UiSupportService.TranslateQuery
  • filter