Files
Anthropic-Cybersecurity-Skills/skills/implementing-cloud-dlp-for-data-protection/references/api-reference.md
T
mukul975 27c6414ca5 Add folder anatomy (scripts/agent.py + references/api-reference.md) for 648 cybersecurity skills
Complete skill folder anatomy across all cybersecurity skills:
- scripts/agent.py: 80-150 line Python agents using real libraries (impacket,
  boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.)
- references/api-reference.md: real API documentation with method signatures
- LICENSE: MIT license for all skill folders
2026-03-10 21:02:12 +01:00

2.1 KiB

API Reference: Implementing Cloud DLP for Data Protection

Libraries

google-cloud-dlp (Google Cloud DLP)

  • Install: pip install google-cloud-dlp
  • Docs: https://cloud.google.com/dlp/docs/reference/libraries
  • DlpServiceClient() -- Create DLP client
  • inspect_content(parent, inspect_config, item) -- Scan content for sensitive data
  • deidentify_content(parent, deidentify_config, item) -- Mask/redact sensitive data
  • create_inspect_template() -- Reusable inspection configuration
  • create_dlp_job() -- Scan Cloud Storage, BigQuery, Datastore

boto3 -- Amazon Macie

GCP DLP Info Types

Category Info Types
PII PERSON_NAME, EMAIL_ADDRESS, PHONE_NUMBER, DATE_OF_BIRTH
Financial CREDIT_CARD_NUMBER, IBAN_CODE, SWIFT_CODE
US-specific US_SOCIAL_SECURITY_NUMBER, US_DRIVERS_LICENSE_NUMBER
Health US_HEALTHCARE_NPI, MEDICAL_RECORD_NUMBER

De-identification Methods

  • CharacterMaskConfig -- Replace characters with mask symbol
  • CryptoReplaceFfxFpeConfig -- Format-preserving encryption
  • RedactConfig -- Remove sensitive content entirely
  • ReplaceWithInfoTypeConfig -- Replace with info type name

Macie Finding Types

  • SensitiveData:S3Object/Personal -- PII found
  • SensitiveData:S3Object/Financial -- Financial data found
  • SensitiveData:S3Object/Credentials -- Credentials detected
  • Policy:IAMUser/S3BucketPublic -- Public bucket with sensitive data

External References