DiscoveryConfig

Docs > DDSQL Reference > Data Directory > DiscoveryConfig

DiscoveryConfig in Google Cloud is a configuration resource used by Security Command Center to define how assets and resources are automatically discovered and updated. It controls the frequency and scope of asset discovery, helping maintain an up-to-date inventory of cloud resources for security monitoring and compliance.

gcp.dlp_discovery_config

Fields

ID	Type	Data Type	Description
_key	core	string
actions	core	json	Actions to execute at the completion of scanning.
ancestors	core	array<string>
create_time	core	timestamp	Output only. The creation timestamp of a DiscoveryConfig.
datadog_display_name	core	string
errors	core	json	Output only. A stream of errors encountered when the config was activated. Repeated errors may result in the config automatically being paused. Output only field. Will return the last 100 errors. Whenever the config is modified this list will be cleared.
gcp_display_name	core	string	Display name (max 100 chars)
gcp_status	core	string	Required. A status for this configuration. Possible values: ['STATUS_UNSPECIFIED', 'RUNNING', 'PAUSED']. Values descriptions: ['Unused', 'The discovery config is currently active.', 'The discovery config is paused temporarily.']
inspect_templates	core	array<string>	Detection logic for profile generation. Not all template features are used by Discovery. FindingLimits, include_quote and exclude_info_types have no impact on Discovery. Multiple templates may be provided if there is data in multiple regions. At most one template must be specified per-region (including "global"). Each region is scanned using the applicable template. If no region-specific template is specified, but a "global" template is specified, it will be copied to that region and used instead. If no global or region-specific template is provided for a region with data, that region's data will not be scanned. For more information, see https://cloud.google.com/sensitive-data-protection/docs/data-profiles#data-residency.
labels	core	array<string>
last_run_time	core	timestamp	Output only. The timestamp of the last time this config was executed.
name	core	string	Unique resource name for the DiscoveryConfig, assigned by the service when the DiscoveryConfig is created, for example `projects/dlp-test-project/locations/global/discoveryConfigs/53234423`.
org_config	core	json	Only set when the parent is an org.
organization_id	core	string
other_cloud_starting_location	core	json	Must be set only when scanning other clouds.
parent	core	string
processing_location	core	json	Optional. Processing location configuration. Vertex AI dataset scanning will set processing_location.image_fallback_type to MultiRegionProcessing by default.
project_id	core	string
project_number	core	string
region_id	core	string
resource_name	core	string
tags	core	hstore_csv
targets	core	json	Target to match against for determining what to scan and how frequently.
update_time	core	timestamp	Output only. The last update timestamp of a DiscoveryConfig.
zone_id	core	string