2

We are trying to create a DLP platform for our company and need to know if we can call DLP API and get the results without actually saving the Document outside of Australia.

Tony
  • 21
  • 1

1 Answers1

1

Yes you can run DLP against data stored in only a single region without having to tranfer the file outside the AU:

Cloud DLP gives you the power to scan, discover, classify, and report on data from virtually anywhere. Cloud DLP has native support for scanning and classifying sensitive data in Cloud Storage

Have a look at the DLP documentation to give you some more insight about the entire process.

Your regional data are processed in the same region as the one they are stored:

With the ability to specify a region in which to perform your Cloud Data Loss Prevention (DLP) operations, you can control where your potentially sensitive data is processed.

You can create job for DLP like on a screenshot below:

enter image description here

If you create your disks (attached to the VM's) or buckets (or any other storage solution) in the Austriala region your data will stay there.

You can even use your VM's in a regional VPC network so any traffic inside it won't leave Australia.

Wojtek_B
  • 4,245
  • 1
  • 7
  • 21
  • Thanks @wojtek_B . I wanted to know if DLP will process the document within Australia leveraging the Local VM disk space or the Document provided from an application source over API will still be copied outside of region even temporarily while processing by DLP service – Tony May 27 '21 at 01:46
  • 1
    Your data are processed in the same region - have a look at my updated answer. – Wojtek_B May 27 '21 at 09:33
  • 1
    Thanks again this was really helpful – Tony May 28 '21 at 01:23