bigquery
5 Dtwo policies tagged "bigquery", including BigQuery: Redact PII in Query Results, Block BigQuery Exfiltration and Cross-Project Writes. Browse by what the control does rather than which app it targets.
BigQuery: Redact PII in Query ResultsScans the content returned by BigQuery's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…Block BigQuery Exfiltration and Cross-Project WritesInspects the raw GoogleSQL string carried by BigQuery SQL tools and denies any statement that moves data out of the tenant's own project — even when the call…Block Destructive SQL in BigQuery QueriesInspects the raw GoogleSQL string carried by BigQuery write-capable query tools and denies any statement in a state-changing class — DML…Default-Deny Unaudited BigQuery ToolsMaintains a per-tenant allowlist of audited BigQuery tool-name suffixes and denies any call whose tool name does not end with an allowlisted entry.Fence Regulated BigQuery Datasets by GroupFences customer-designated regulated BigQuery data domains by data-domain IdP group, at ingress, before any statement or metadata lookup reaches BigQuery.