zz_deidentifytemplate_types.go

/*
Copyright 2021 The Crossplane Authors.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

// Code generated by upjet. DO NOT EDIT.

package v1beta1

import (
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
	"k8s.io/apimachinery/pkg/runtime/schema"

	v1 "github.com/crossplane/crossplane-runtime/apis/common/v1"
)

type AllInfoTypesObservation struct {
}

type AllInfoTypesParameters struct {
}

type AllTextObservation struct {
}

type AllTextParameters struct {
}

type BucketingConfigObservation struct {

	// Set of buckets. Ranges must be non-overlapping.
	// Bucket is represented as a range, along with replacement values.
	// Structure is documented below.
	Buckets []BucketsObservation `json:"buckets,omitempty" tf:"buckets,omitempty"`
}

type BucketingConfigParameters struct {

	// Set of buckets. Ranges must be non-overlapping.
	// Bucket is represented as a range, along with replacement values.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Buckets []BucketsParameters `json:"buckets,omitempty" tf:"buckets,omitempty"`
}

type BucketsObservation struct {

	// Upper bound of the range, exclusive; type must match min.
	// The max block must only contain one argument. See the bucketing_config block description for more information about choosing a data type.
	// Structure is documented below.
	Max []MaxObservation `json:"max,omitempty" tf:"max,omitempty"`

	// Lower bound of the range, inclusive. Type should be the same as max if used.
	// The min block must only contain one argument. See the bucketing_config block description for more information about choosing a data type.
	// Structure is documented below.
	Min []MinObservation `json:"min,omitempty" tf:"min,omitempty"`

	// Replacement value for this bucket.
	// The replacement_value block must only contain one argument.
	// Structure is documented below.
	ReplacementValue []ReplacementValueObservation `json:"replacementValue,omitempty" tf:"replacement_value,omitempty"`
}

type BucketsParameters struct {

	// Upper bound of the range, exclusive; type must match min.
	// The max block must only contain one argument. See the bucketing_config block description for more information about choosing a data type.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Max []MaxParameters `json:"max,omitempty" tf:"max,omitempty"`

	// Lower bound of the range, inclusive. Type should be the same as max if used.
	// The min block must only contain one argument. See the bucketing_config block description for more information about choosing a data type.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Min []MinParameters `json:"min,omitempty" tf:"min,omitempty"`

	// Replacement value for this bucket.
	// The replacement_value block must only contain one argument.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	ReplacementValue []ReplacementValueParameters `json:"replacementValue" tf:"replacement_value,omitempty"`
}

type CharacterMaskConfigCharactersToIgnoreObservation struct {

	// Characters to not transform when masking.
	CharactersToSkip *string `json:"charactersToSkip,omitempty" tf:"characters_to_skip,omitempty"`

	// Common characters to not transform when masking. Useful to avoid removing punctuation.
	// Possible values are: NUMERIC, ALPHA_UPPER_CASE, ALPHA_LOWER_CASE, PUNCTUATION, WHITESPACE.
	CommonCharactersToIgnore *string `json:"commonCharactersToIgnore,omitempty" tf:"common_characters_to_ignore,omitempty"`
}

type CharacterMaskConfigCharactersToIgnoreParameters struct {

	// Characters to not transform when masking.
	// +kubebuilder:validation:Optional
	CharactersToSkip *string `json:"charactersToSkip,omitempty" tf:"characters_to_skip,omitempty"`

	// Common characters to not transform when masking. Useful to avoid removing punctuation.
	// Possible values are: NUMERIC, ALPHA_UPPER_CASE, ALPHA_LOWER_CASE, PUNCTUATION, WHITESPACE.
	// +kubebuilder:validation:Optional
	CommonCharactersToIgnore *string `json:"commonCharactersToIgnore,omitempty" tf:"common_characters_to_ignore,omitempty"`
}

type CharacterMaskConfigObservation struct {
	CharactersToIgnore []CharactersToIgnoreObservation `json:"charactersToIgnore,omitempty" tf:"characters_to_ignore,omitempty"`

	// is *
	MaskingCharacter *string `json:"maskingCharacter,omitempty" tf:"masking_character,omitempty"`

	// 4
	NumberToMask *float64 `json:"numberToMask,omitempty" tf:"number_to_mask,omitempty"`

	// is false
	ReverseOrder *bool `json:"reverseOrder,omitempty" tf:"reverse_order,omitempty"`
}

type CharacterMaskConfigParameters struct {

	// +kubebuilder:validation:Optional
	CharactersToIgnore []CharactersToIgnoreParameters `json:"charactersToIgnore,omitempty" tf:"characters_to_ignore,omitempty"`

	// is *
	// +kubebuilder:validation:Optional
	MaskingCharacter *string `json:"maskingCharacter,omitempty" tf:"masking_character,omitempty"`

	// 4
	// +kubebuilder:validation:Optional
	NumberToMask *float64 `json:"numberToMask,omitempty" tf:"number_to_mask,omitempty"`

	// is false
	// +kubebuilder:validation:Optional
	ReverseOrder *bool `json:"reverseOrder,omitempty" tf:"reverse_order,omitempty"`
}

type CharactersToIgnoreObservation struct {

	// Characters to not transform when masking.
	CharactersToSkip *string `json:"charactersToSkip,omitempty" tf:"characters_to_skip,omitempty"`

	// Common characters to not transform when masking. Useful to avoid removing punctuation.
	// Possible values are: NUMERIC, ALPHA_UPPER_CASE, ALPHA_LOWER_CASE, PUNCTUATION, WHITESPACE.
	CommonCharactersToIgnore *string `json:"commonCharactersToIgnore,omitempty" tf:"common_characters_to_ignore,omitempty"`
}

type CharactersToIgnoreParameters struct {

	// Characters to not transform when masking.
	// +kubebuilder:validation:Optional
	CharactersToSkip *string `json:"charactersToSkip,omitempty" tf:"characters_to_skip,omitempty"`

	// Common characters to not transform when masking. Useful to avoid removing punctuation.
	// Possible values are: NUMERIC, ALPHA_UPPER_CASE, ALPHA_LOWER_CASE, PUNCTUATION, WHITESPACE.
	// +kubebuilder:validation:Optional
	CommonCharactersToIgnore *string `json:"commonCharactersToIgnore,omitempty" tf:"common_characters_to_ignore,omitempty"`
}

type ConditionExpressionsObservation struct {

	// Conditions to apply to the expression.
	// Structure is documented below.
	Conditions []ExpressionsConditionsObservation `json:"conditions,omitempty" tf:"conditions,omitempty"`

	// The operator to apply to the result of conditions. Default and currently only supported value is AND.
	// Default value is AND.
	// Possible values are: AND.
	LogicalOperator *string `json:"logicalOperator,omitempty" tf:"logical_operator,omitempty"`
}

type ConditionExpressionsParameters struct {

	// Conditions to apply to the expression.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Conditions []ExpressionsConditionsParameters `json:"conditions,omitempty" tf:"conditions,omitempty"`

	// The operator to apply to the result of conditions. Default and currently only supported value is AND.
	// Default value is AND.
	// Possible values are: AND.
	// +kubebuilder:validation:Optional
	LogicalOperator *string `json:"logicalOperator,omitempty" tf:"logical_operator,omitempty"`
}

type ConditionObservation struct {

	// An expression, consisting of an operator and conditions.
	// Structure is documented below.
	Expressions []ExpressionsObservation `json:"expressions,omitempty" tf:"expressions,omitempty"`
}

type ConditionParameters struct {

	// An expression, consisting of an operator and conditions.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Expressions []ExpressionsParameters `json:"expressions,omitempty" tf:"expressions,omitempty"`
}

type ConditionsConditionsObservation struct {

	// Field within the record this condition is evaluated against.
	// Structure is documented below.
	Field []FieldObservation `json:"field,omitempty" tf:"field,omitempty"`

	// Operator used to compare the field or infoType to the value.
	// Possible values are: EQUAL_TO, NOT_EQUAL_TO, GREATER_THAN, LESS_THAN, GREATER_THAN_OR_EQUALS, LESS_THAN_OR_EQUALS, EXISTS.
	Operator *string `json:"operator,omitempty" tf:"operator,omitempty"`

	// Value to compare against.
	// The value block must only contain one argument. For example when a condition is evaluated against a string-type field, only string_value should be set.
	// This argument is mandatory, except for conditions using the EXISTS operator.
	// Structure is documented below.
	Value []ValueObservation `json:"value,omitempty" tf:"value,omitempty"`
}

type ConditionsConditionsParameters struct {

	// Field within the record this condition is evaluated against.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	Field []FieldParameters `json:"field" tf:"field,omitempty"`

	// Operator used to compare the field or infoType to the value.
	// Possible values are: EQUAL_TO, NOT_EQUAL_TO, GREATER_THAN, LESS_THAN, GREATER_THAN_OR_EQUALS, LESS_THAN_OR_EQUALS, EXISTS.
	// +kubebuilder:validation:Required
	Operator *string `json:"operator" tf:"operator,omitempty"`

	// Value to compare against.
	// The value block must only contain one argument. For example when a condition is evaluated against a string-type field, only string_value should be set.
	// This argument is mandatory, except for conditions using the EXISTS operator.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Value []ValueParameters `json:"value,omitempty" tf:"value,omitempty"`
}

type ConditionsFieldObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type ConditionsFieldParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type ConditionsObservation struct {

	// Conditions to apply to the expression.
	// Structure is documented below.
	Conditions []ConditionsConditionsObservation `json:"conditions,omitempty" tf:"conditions,omitempty"`
}

type ConditionsParameters struct {

	// Conditions to apply to the expression.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Conditions []ConditionsConditionsParameters `json:"conditions,omitempty" tf:"conditions,omitempty"`
}

type ConditionsValueDateValueObservation struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type ConditionsValueDateValueParameters struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	// +kubebuilder:validation:Optional
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	// +kubebuilder:validation:Optional
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	// +kubebuilder:validation:Optional
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type ConditionsValueObservation struct {

	// A boolean value.
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	DateValue []ConditionsValueDateValueObservation `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	TimeValue []ConditionsValueTimeValueObservation `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type ConditionsValueParameters struct {

	// A boolean value.
	// +kubebuilder:validation:Optional
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DateValue []ConditionsValueDateValueParameters `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	// +kubebuilder:validation:Optional
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	// +kubebuilder:validation:Optional
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	// +kubebuilder:validation:Optional
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	// +kubebuilder:validation:Optional
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	TimeValue []ConditionsValueTimeValueParameters `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +kubebuilder:validation:Optional
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type ConditionsValueTimeValueObservation struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type ConditionsValueTimeValueParameters struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	// +kubebuilder:validation:Optional
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	// +kubebuilder:validation:Optional
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	// +kubebuilder:validation:Optional
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	// +kubebuilder:validation:Optional
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type ContextObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type ContextParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type CryptoDeterministicConfigContextObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type CryptoDeterministicConfigContextParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type CryptoDeterministicConfigCryptoKeyKMSWrappedObservation struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	CryptoKeyName *string `json:"cryptoKeyName,omitempty" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	WrappedKey *string `json:"wrappedKey,omitempty" tf:"wrapped_key,omitempty"`
}

type CryptoDeterministicConfigCryptoKeyKMSWrappedParameters struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	// +kubebuilder:validation:Required
	CryptoKeyName *string `json:"cryptoKeyName" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	WrappedKey *string `json:"wrappedKey" tf:"wrapped_key,omitempty"`
}

type CryptoDeterministicConfigCryptoKeyObservation struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	KMSWrapped []CryptoDeterministicConfigCryptoKeyKMSWrappedObservation `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	Transient []CryptoDeterministicConfigCryptoKeyTransientObservation `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	Unwrapped []CryptoDeterministicConfigCryptoKeyUnwrappedObservation `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type CryptoDeterministicConfigCryptoKeyParameters struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	KMSWrapped []CryptoDeterministicConfigCryptoKeyKMSWrappedParameters `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Transient []CryptoDeterministicConfigCryptoKeyTransientParameters `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Unwrapped []CryptoDeterministicConfigCryptoKeyUnwrappedParameters `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type CryptoDeterministicConfigCryptoKeyTransientObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type CryptoDeterministicConfigCryptoKeyTransientParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Required
	Name *string `json:"name" tf:"name,omitempty"`
}

type CryptoDeterministicConfigCryptoKeyUnwrappedObservation struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	Key *string `json:"key,omitempty" tf:"key,omitempty"`
}

type CryptoDeterministicConfigCryptoKeyUnwrappedParameters struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	Key *string `json:"key" tf:"key,omitempty"`
}

type CryptoDeterministicConfigObservation struct {

	// Points to the field that contains the context, for example, an entity id.
	// If set, must also set cryptoKey. If set, shift will be consistent for the given context.
	// Structure is documented below.
	Context []ContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	CryptoKey []CryptoKeyObservation `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`

	// The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate
	// For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc'
	// This annotation identifies the surrogate when inspecting content using the custom infoType SurrogateType. This facilitates reversal of the surrogate when it occurs in free text.
	// In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE
	// Structure is documented below.
	SurrogateInfoType []SurrogateInfoTypeObservation `json:"surrogateInfoType,omitempty" tf:"surrogate_info_type,omitempty"`
}

type CryptoDeterministicConfigParameters struct {

	// Points to the field that contains the context, for example, an entity id.
	// If set, must also set cryptoKey. If set, shift will be consistent for the given context.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Context []ContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoKey []CryptoKeyParameters `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`

	// The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate
	// For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc'
	// This annotation identifies the surrogate when inspecting content using the custom infoType SurrogateType. This facilitates reversal of the surrogate when it occurs in free text.
	// In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	SurrogateInfoType []SurrogateInfoTypeParameters `json:"surrogateInfoType,omitempty" tf:"surrogate_info_type,omitempty"`
}

type CryptoDeterministicConfigSurrogateInfoTypeObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type CryptoDeterministicConfigSurrogateInfoTypeParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	// +kubebuilder:validation:Optional
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type CryptoHashConfigCryptoKeyKMSWrappedObservation struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	CryptoKeyName *string `json:"cryptoKeyName,omitempty" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	WrappedKey *string `json:"wrappedKey,omitempty" tf:"wrapped_key,omitempty"`
}

type CryptoHashConfigCryptoKeyKMSWrappedParameters struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	// +kubebuilder:validation:Required
	CryptoKeyName *string `json:"cryptoKeyName" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	WrappedKey *string `json:"wrappedKey" tf:"wrapped_key,omitempty"`
}

type CryptoHashConfigCryptoKeyObservation struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	KMSWrapped []CryptoHashConfigCryptoKeyKMSWrappedObservation `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	Transient []CryptoHashConfigCryptoKeyTransientObservation `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	Unwrapped []CryptoHashConfigCryptoKeyUnwrappedObservation `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type CryptoHashConfigCryptoKeyParameters struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	KMSWrapped []CryptoHashConfigCryptoKeyKMSWrappedParameters `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Transient []CryptoHashConfigCryptoKeyTransientParameters `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Unwrapped []CryptoHashConfigCryptoKeyUnwrappedParameters `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type CryptoHashConfigCryptoKeyTransientObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type CryptoHashConfigCryptoKeyTransientParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Required
	Name *string `json:"name" tf:"name,omitempty"`
}

type CryptoHashConfigCryptoKeyUnwrappedObservation struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	Key *string `json:"key,omitempty" tf:"key,omitempty"`
}

type CryptoHashConfigCryptoKeyUnwrappedParameters struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	Key *string `json:"key" tf:"key,omitempty"`
}

type CryptoHashConfigObservation struct {

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	CryptoKey []CryptoHashConfigCryptoKeyObservation `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`
}

type CryptoHashConfigParameters struct {

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoKey []CryptoHashConfigCryptoKeyParameters `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`
}

type CryptoKeyKMSWrappedObservation struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	CryptoKeyName *string `json:"cryptoKeyName,omitempty" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	WrappedKey *string `json:"wrappedKey,omitempty" tf:"wrapped_key,omitempty"`
}

type CryptoKeyKMSWrappedParameters struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	// +kubebuilder:validation:Required
	CryptoKeyName *string `json:"cryptoKeyName" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	WrappedKey *string `json:"wrappedKey" tf:"wrapped_key,omitempty"`
}

type CryptoKeyObservation struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	KMSWrapped []KMSWrappedObservation `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	Transient []TransientObservation `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	Unwrapped []UnwrappedObservation `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type CryptoKeyParameters struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	KMSWrapped []KMSWrappedParameters `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Transient []TransientParameters `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Unwrapped []UnwrappedParameters `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type CryptoKeyTransientObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type CryptoKeyTransientParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Required
	Name *string `json:"name" tf:"name,omitempty"`
}

type CryptoKeyUnwrappedObservation struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	Key *string `json:"key,omitempty" tf:"key,omitempty"`
}

type CryptoKeyUnwrappedParameters struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	Key *string `json:"key" tf:"key,omitempty"`
}

type CryptoReplaceFfxFpeConfigContextObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type CryptoReplaceFfxFpeConfigContextParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type CryptoReplaceFfxFpeConfigCryptoKeyKMSWrappedObservation struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	CryptoKeyName *string `json:"cryptoKeyName,omitempty" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	WrappedKey *string `json:"wrappedKey,omitempty" tf:"wrapped_key,omitempty"`
}

type CryptoReplaceFfxFpeConfigCryptoKeyKMSWrappedParameters struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	// +kubebuilder:validation:Required
	CryptoKeyName *string `json:"cryptoKeyName" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	WrappedKey *string `json:"wrappedKey" tf:"wrapped_key,omitempty"`
}

type CryptoReplaceFfxFpeConfigCryptoKeyObservation struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	KMSWrapped []CryptoKeyKMSWrappedObservation `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	Transient []CryptoKeyTransientObservation `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	Unwrapped []CryptoKeyUnwrappedObservation `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type CryptoReplaceFfxFpeConfigCryptoKeyParameters struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	KMSWrapped []CryptoKeyKMSWrappedParameters `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Transient []CryptoKeyTransientParameters `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Unwrapped []CryptoKeyUnwrappedParameters `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type CryptoReplaceFfxFpeConfigCryptoKeyTransientObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type CryptoReplaceFfxFpeConfigCryptoKeyTransientParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Required
	Name *string `json:"name" tf:"name,omitempty"`
}

type CryptoReplaceFfxFpeConfigCryptoKeyUnwrappedObservation struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	Key *string `json:"key,omitempty" tf:"key,omitempty"`
}

type CryptoReplaceFfxFpeConfigCryptoKeyUnwrappedParameters struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	Key *string `json:"key" tf:"key,omitempty"`
}

type CryptoReplaceFfxFpeConfigObservation struct {

	// Common alphabets.
	// Possible values are: FFX_COMMON_NATIVE_ALPHABET_UNSPECIFIED, NUMERIC, HEXADECIMAL, UPPER_CASE_ALPHA_NUMERIC, ALPHA_NUMERIC.
	CommonAlphabet *string `json:"commonAlphabet,omitempty" tf:"common_alphabet,omitempty"`

	// Points to the field that contains the context, for example, an entity id.
	// If set, must also set cryptoKey. If set, shift will be consistent for the given context.
	// Structure is documented below.
	Context []CryptoReplaceFfxFpeConfigContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	CryptoKey []CryptoReplaceFfxFpeConfigCryptoKeyObservation `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`

	// This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports. This happens before/after encryption/decryption. Each character listed must appear only once. Number of characters must be in the range [2, 95]. This must be encoded as ASCII. The order of characters does not matter. The full list of allowed characters is:
	// 0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~`!@#$%^&*()_-+={[}]|:;"'<,>.?/
	CustomAlphabet *string `json:"customAlphabet,omitempty" tf:"custom_alphabet,omitempty"`

	// The native way to select the alphabet. Must be in the range [2, 95].
	Radix *float64 `json:"radix,omitempty" tf:"radix,omitempty"`

	// The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate
	// For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc'
	// This annotation identifies the surrogate when inspecting content using the custom infoType SurrogateType. This facilitates reversal of the surrogate when it occurs in free text.
	// In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE
	// Structure is documented below.
	SurrogateInfoType []CryptoReplaceFfxFpeConfigSurrogateInfoTypeObservation `json:"surrogateInfoType,omitempty" tf:"surrogate_info_type,omitempty"`
}

type CryptoReplaceFfxFpeConfigParameters struct {

	// Common alphabets.
	// Possible values are: FFX_COMMON_NATIVE_ALPHABET_UNSPECIFIED, NUMERIC, HEXADECIMAL, UPPER_CASE_ALPHA_NUMERIC, ALPHA_NUMERIC.
	// +kubebuilder:validation:Optional
	CommonAlphabet *string `json:"commonAlphabet,omitempty" tf:"common_alphabet,omitempty"`

	// Points to the field that contains the context, for example, an entity id.
	// If set, must also set cryptoKey. If set, shift will be consistent for the given context.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Context []CryptoReplaceFfxFpeConfigContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoKey []CryptoReplaceFfxFpeConfigCryptoKeyParameters `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`

	// This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports. This happens before/after encryption/decryption. Each character listed must appear only once. Number of characters must be in the range [2, 95]. This must be encoded as ASCII. The order of characters does not matter. The full list of allowed characters is:
	// 0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~`!@#$%^&*()_-+={[}]|:;"'<,>.?/
	// +kubebuilder:validation:Optional
	CustomAlphabet *string `json:"customAlphabet,omitempty" tf:"custom_alphabet,omitempty"`

	// The native way to select the alphabet. Must be in the range [2, 95].
	// +kubebuilder:validation:Optional
	Radix *float64 `json:"radix,omitempty" tf:"radix,omitempty"`

	// The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate
	// For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc'
	// This annotation identifies the surrogate when inspecting content using the custom infoType SurrogateType. This facilitates reversal of the surrogate when it occurs in free text.
	// In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	SurrogateInfoType []CryptoReplaceFfxFpeConfigSurrogateInfoTypeParameters `json:"surrogateInfoType,omitempty" tf:"surrogate_info_type,omitempty"`
}

type CryptoReplaceFfxFpeConfigSurrogateInfoTypeObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type CryptoReplaceFfxFpeConfigSurrogateInfoTypeParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	// +kubebuilder:validation:Optional
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type DateShiftConfigContextObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type DateShiftConfigContextParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type DateShiftConfigCryptoKeyKMSWrappedObservation struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	CryptoKeyName *string `json:"cryptoKeyName,omitempty" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	WrappedKey *string `json:"wrappedKey,omitempty" tf:"wrapped_key,omitempty"`
}

type DateShiftConfigCryptoKeyKMSWrappedParameters struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	// +kubebuilder:validation:Required
	CryptoKeyName *string `json:"cryptoKeyName" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	WrappedKey *string `json:"wrappedKey" tf:"wrapped_key,omitempty"`
}

type DateShiftConfigCryptoKeyObservation struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	KMSWrapped []DateShiftConfigCryptoKeyKMSWrappedObservation `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	Transient []DateShiftConfigCryptoKeyTransientObservation `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	Unwrapped []DateShiftConfigCryptoKeyUnwrappedObservation `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type DateShiftConfigCryptoKeyParameters struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	KMSWrapped []DateShiftConfigCryptoKeyKMSWrappedParameters `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Transient []DateShiftConfigCryptoKeyTransientParameters `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Unwrapped []DateShiftConfigCryptoKeyUnwrappedParameters `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type DateShiftConfigCryptoKeyTransientObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type DateShiftConfigCryptoKeyTransientParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Required
	Name *string `json:"name" tf:"name,omitempty"`
}

type DateShiftConfigCryptoKeyUnwrappedObservation struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	Key *string `json:"key,omitempty" tf:"key,omitempty"`
}

type DateShiftConfigCryptoKeyUnwrappedParameters struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	Key *string `json:"key" tf:"key,omitempty"`
}

type DateShiftConfigObservation struct {

	// Points to the field that contains the context, for example, an entity id.
	// If set, must also set cryptoKey. If set, shift will be consistent for the given context.
	// Structure is documented below.
	Context []DateShiftConfigContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	CryptoKey []DateShiftConfigCryptoKeyObservation `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`

	// For example, -5 means shift date to at most 5 days back in the past.
	LowerBoundDays *float64 `json:"lowerBoundDays,omitempty" tf:"lower_bound_days,omitempty"`

	// Range of shift in days. Actual shift will be selected at random within this range (inclusive ends). Negative means shift to earlier in time. Must not be more than 365250 days (1000 years) each direction.
	// For example, 3 means shift date to at most 3 days into the future.
	UpperBoundDays *float64 `json:"upperBoundDays,omitempty" tf:"upper_bound_days,omitempty"`
}

type DateShiftConfigParameters struct {

	// Points to the field that contains the context, for example, an entity id.
	// If set, must also set cryptoKey. If set, shift will be consistent for the given context.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Context []DateShiftConfigContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoKey []DateShiftConfigCryptoKeyParameters `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`

	// For example, -5 means shift date to at most 5 days back in the past.
	// +kubebuilder:validation:Required
	LowerBoundDays *float64 `json:"lowerBoundDays" tf:"lower_bound_days,omitempty"`

	// Range of shift in days. Actual shift will be selected at random within this range (inclusive ends). Negative means shift to earlier in time. Must not be more than 365250 days (1000 years) each direction.
	// For example, 3 means shift date to at most 3 days into the future.
	// +kubebuilder:validation:Required
	UpperBoundDays *float64 `json:"upperBoundDays" tf:"upper_bound_days,omitempty"`
}

type DateValueObservation struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type DateValueParameters struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	// +kubebuilder:validation:Optional
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	// +kubebuilder:validation:Optional
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	// +kubebuilder:validation:Optional
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type DeidentifyConfigObservation struct {

	// Treat the dataset as an image and redact.
	// Structure is documented below.
	ImageTransformations []ImageTransformationsObservation `json:"imageTransformations,omitempty" tf:"image_transformations,omitempty"`

	// Treat the dataset as free-form text and apply the same free text transformation everywhere
	// Structure is documented below.
	InfoTypeTransformations []InfoTypeTransformationsObservation `json:"infoTypeTransformations,omitempty" tf:"info_type_transformations,omitempty"`

	// Treat the dataset as structured. Transformations can be applied to specific locations within structured datasets, such as transforming a column within a table.
	// Structure is documented below.
	RecordTransformations []RecordTransformationsObservation `json:"recordTransformations,omitempty" tf:"record_transformations,omitempty"`
}

type DeidentifyConfigParameters struct {

	// Treat the dataset as an image and redact.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	ImageTransformations []ImageTransformationsParameters `json:"imageTransformations,omitempty" tf:"image_transformations,omitempty"`

	// Treat the dataset as free-form text and apply the same free text transformation everywhere
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	InfoTypeTransformations []InfoTypeTransformationsParameters `json:"infoTypeTransformations,omitempty" tf:"info_type_transformations,omitempty"`

	// Treat the dataset as structured. Transformations can be applied to specific locations within structured datasets, such as transforming a column within a table.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	RecordTransformations []RecordTransformationsParameters `json:"recordTransformations,omitempty" tf:"record_transformations,omitempty"`
}

type DeidentifyTemplateObservation struct {

	// The creation timestamp of an deidentifyTemplate. Set by the server.
	CreateTime *string `json:"createTime,omitempty" tf:"create_time,omitempty"`

	// Configuration of the deidentify template
	// Structure is documented below.
	DeidentifyConfig []DeidentifyConfigObservation `json:"deidentifyConfig,omitempty" tf:"deidentify_config,omitempty"`

	// A description of the template.
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// User set display name of the template.
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// an identifier for the resource with format {{parent}}/deidentifyTemplates/{{name}}
	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// The resource name of the template. Set by the server.
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// The parent of the template in any of the following formats:
	Parent *string `json:"parent,omitempty" tf:"parent,omitempty"`

	// The last update timestamp of an deidentifyTemplate. Set by the server.
	UpdateTime *string `json:"updateTime,omitempty" tf:"update_time,omitempty"`
}

type DeidentifyTemplateParameters struct {

	// Configuration of the deidentify template
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DeidentifyConfig []DeidentifyConfigParameters `json:"deidentifyConfig,omitempty" tf:"deidentify_config,omitempty"`

	// A description of the template.
	// +kubebuilder:validation:Optional
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// User set display name of the template.
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// The parent of the template in any of the following formats:
	// +kubebuilder:validation:Optional
	Parent *string `json:"parent,omitempty" tf:"parent,omitempty"`
}

type ExpressionsConditionsConditionsObservation struct {

	// Field within the record this condition is evaluated against.
	// Structure is documented below.
	Field []ConditionsFieldObservation `json:"field,omitempty" tf:"field,omitempty"`

	// Operator used to compare the field or infoType to the value.
	// Possible values are: EQUAL_TO, NOT_EQUAL_TO, GREATER_THAN, LESS_THAN, GREATER_THAN_OR_EQUALS, LESS_THAN_OR_EQUALS, EXISTS.
	Operator *string `json:"operator,omitempty" tf:"operator,omitempty"`

	// Value to compare against.
	// The value block must only contain one argument. For example when a condition is evaluated against a string-type field, only string_value should be set.
	// This argument is mandatory, except for conditions using the EXISTS operator.
	// Structure is documented below.
	Value []ConditionsValueObservation `json:"value,omitempty" tf:"value,omitempty"`
}

type ExpressionsConditionsConditionsParameters struct {

	// Field within the record this condition is evaluated against.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	Field []ConditionsFieldParameters `json:"field" tf:"field,omitempty"`

	// Operator used to compare the field or infoType to the value.
	// Possible values are: EQUAL_TO, NOT_EQUAL_TO, GREATER_THAN, LESS_THAN, GREATER_THAN_OR_EQUALS, LESS_THAN_OR_EQUALS, EXISTS.
	// +kubebuilder:validation:Required
	Operator *string `json:"operator" tf:"operator,omitempty"`

	// Value to compare against.
	// The value block must only contain one argument. For example when a condition is evaluated against a string-type field, only string_value should be set.
	// This argument is mandatory, except for conditions using the EXISTS operator.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Value []ConditionsValueParameters `json:"value,omitempty" tf:"value,omitempty"`
}

type ExpressionsConditionsObservation struct {

	// Conditions to apply to the expression.
	// Structure is documented below.
	Conditions []ExpressionsConditionsConditionsObservation `json:"conditions,omitempty" tf:"conditions,omitempty"`
}

type ExpressionsConditionsParameters struct {

	// Conditions to apply to the expression.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Conditions []ExpressionsConditionsConditionsParameters `json:"conditions,omitempty" tf:"conditions,omitempty"`
}

type ExpressionsObservation struct {

	// Conditions to apply to the expression.
	// Structure is documented below.
	Conditions []ConditionsObservation `json:"conditions,omitempty" tf:"conditions,omitempty"`

	// The operator to apply to the result of conditions. Default and currently only supported value is AND.
	// Default value is AND.
	// Possible values are: AND.
	LogicalOperator *string `json:"logicalOperator,omitempty" tf:"logical_operator,omitempty"`
}

type ExpressionsParameters struct {

	// Conditions to apply to the expression.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Conditions []ConditionsParameters `json:"conditions,omitempty" tf:"conditions,omitempty"`

	// The operator to apply to the result of conditions. Default and currently only supported value is AND.
	// Default value is AND.
	// Possible values are: AND.
	// +kubebuilder:validation:Optional
	LogicalOperator *string `json:"logicalOperator,omitempty" tf:"logical_operator,omitempty"`
}

type FieldObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type FieldParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type FieldTransformationsObservation struct {

	// A condition that when it evaluates to true will result in the record being evaluated to be suppressed from the transformed content.
	// Structure is documented below.
	Condition []ConditionObservation `json:"condition,omitempty" tf:"condition,omitempty"`

	// Input field(s) to apply the transformation to. When you have columns that reference their position within a list, omit the index from the FieldId.
	// FieldId name matching ignores the index. For example, instead of "contact.nums[0].type", use "contact.nums.type".
	// Structure is documented below.
	Fields []FieldsObservation `json:"fields,omitempty" tf:"fields,omitempty"`

	// Primitive transformation to apply to the infoType.
	// The primitive_transformation block must only contain one argument, corresponding to the type of transformation.
	// Structure is documented below.
	PrimitiveTransformation []FieldTransformationsPrimitiveTransformationObservation `json:"primitiveTransformation,omitempty" tf:"primitive_transformation,omitempty"`
}

type FieldTransformationsParameters struct {

	// A condition that when it evaluates to true will result in the record being evaluated to be suppressed from the transformed content.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Condition []ConditionParameters `json:"condition,omitempty" tf:"condition,omitempty"`

	// Input field(s) to apply the transformation to. When you have columns that reference their position within a list, omit the index from the FieldId.
	// FieldId name matching ignores the index. For example, instead of "contact.nums[0].type", use "contact.nums.type".
	// Structure is documented below.
	// +kubebuilder:validation:Required
	Fields []FieldsParameters `json:"fields" tf:"fields,omitempty"`

	// Primitive transformation to apply to the infoType.
	// The primitive_transformation block must only contain one argument, corresponding to the type of transformation.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	PrimitiveTransformation []FieldTransformationsPrimitiveTransformationParameters `json:"primitiveTransformation" tf:"primitive_transformation,omitempty"`
}

type FieldTransformationsPrimitiveTransformationObservation struct {

	// Generalization function that buckets values based on ranges. The ranges and replacement values are dynamically provided by the user for custom behavior, such as 1-30 -> LOW 31-65 -> MEDIUM 66-100 -> HIGH
	// This can be used on data of type: number, long, string, timestamp.
	// If the provided value type differs from the type of data being transformed, we will first attempt converting the type of the data to be transformed to match the type of the bound before comparing.
	// See https://cloud.google.com/dlp/docs/concepts-bucketing to learn more.
	// Structure is documented below.
	BucketingConfig []BucketingConfigObservation `json:"bucketingConfig,omitempty" tf:"bucketing_config,omitempty"`

	// Partially mask a string by replacing a given number of characters with a fixed character.
	// Masking can start from the beginning or end of the string.
	// Structure is documented below.
	CharacterMaskConfig []PrimitiveTransformationCharacterMaskConfigObservation `json:"characterMaskConfig,omitempty" tf:"character_mask_config,omitempty"`

	// Pseudonymization method that generates deterministic encryption for the given input. Outputs a base64 encoded representation of the encrypted output. Uses AES-SIV based on the RFC https://tools.ietf.org/html/rfc5297.
	// Structure is documented below.
	CryptoDeterministicConfig []PrimitiveTransformationCryptoDeterministicConfigObservation `json:"cryptoDeterministicConfig,omitempty" tf:"crypto_deterministic_config,omitempty"`

	// Pseudonymization method that generates surrogates via cryptographic hashing. Uses SHA-256. The key size must be either 32 or 64 bytes.
	// Outputs a base64 encoded representation of the hashed output (for example, L7k0BHmF1ha5U3NfGykjro4xWi1MPVQPjhMAZbSV9mM=).
	// Currently, only string and integer values can be hashed.
	// See https://cloud.google.com/dlp/docs/pseudonymization to learn more.
	// Structure is documented below.
	CryptoHashConfig []CryptoHashConfigObservation `json:"cryptoHashConfig,omitempty" tf:"crypto_hash_config,omitempty"`

	// Replaces an identifier with a surrogate using Format Preserving Encryption (FPE) with the FFX mode of operation; however when used in the content.reidentify API method, it serves the opposite function by reversing the surrogate back into the original identifier. The identifier must be encoded as ASCII. For a given crypto key and context, the same identifier will be replaced with the same surrogate. Identifiers must be at least two characters long. In the case that the identifier is the empty string, it will be skipped. See https://cloud.google.com/dlp/docs/pseudonymization to learn more.
	// Note: We recommend using CryptoDeterministicConfig for all use cases which do not require preserving the input alphabet space and size, plus warrant referential integrity.
	// Structure is documented below.
	CryptoReplaceFfxFpeConfig []PrimitiveTransformationCryptoReplaceFfxFpeConfigObservation `json:"cryptoReplaceFfxFpeConfig,omitempty" tf:"crypto_replace_ffx_fpe_config,omitempty"`

	// Shifts dates by random number of days, with option to be consistent for the same context. See https://cloud.google.com/dlp/docs/concepts-date-shifting to learn more.
	// Structure is documented below.
	DateShiftConfig []DateShiftConfigObservation `json:"dateShiftConfig,omitempty" tf:"date_shift_config,omitempty"`

	// Buckets values based on fixed size ranges. The Bucketing transformation can provide all of this functionality, but requires more configuration. This message is provided as a convenience to the user for simple bucketing strategies.
	// The transformed value will be a hyphenated string of {lower_bound}-{upper_bound}. For example, if lower_bound = 10 and upper_bound = 20, all values that are within this bucket will be replaced with "10-20".
	// This can be used on data of type: double, long.
	// If the bound Value type differs from the type of data being transformed, we will first attempt converting the type of the data to be transformed to match the type of the bound before comparing.
	// See https://cloud.google.com/dlp/docs/concepts-bucketing to learn more.
	// Structure is documented below.
	FixedSizeBucketingConfig []FixedSizeBucketingConfigObservation `json:"fixedSizeBucketingConfig,omitempty" tf:"fixed_size_bucketing_config,omitempty"`

	// Redact a given value. For example, if used with an InfoTypeTransformation transforming PHONE_NUMBER, and input 'My phone number is 206-555-0123', the output would be 'My phone number is '.
	RedactConfig []RedactConfigParameters `json:"redactConfig,omitempty" tf:"redact_config,omitempty"`

	// Replace each input value with a given value.
	// Structure is documented below.
	ReplaceConfig []PrimitiveTransformationReplaceConfigObservation `json:"replaceConfig,omitempty" tf:"replace_config,omitempty"`

	// Replace with a value randomly drawn (with replacement) from a dictionary.
	// Structure is documented below.
	ReplaceDictionaryConfig []PrimitiveTransformationReplaceDictionaryConfigObservation `json:"replaceDictionaryConfig,omitempty" tf:"replace_dictionary_config,omitempty"`

	// For use with Date, Timestamp, and TimeOfDay, extract or preserve a portion of the value.
	// Structure is documented below.
	TimePartConfig []TimePartConfigObservation `json:"timePartConfig,omitempty" tf:"time_part_config,omitempty"`
}

type FieldTransformationsPrimitiveTransformationParameters struct {

	// Generalization function that buckets values based on ranges. The ranges and replacement values are dynamically provided by the user for custom behavior, such as 1-30 -> LOW 31-65 -> MEDIUM 66-100 -> HIGH
	// This can be used on data of type: number, long, string, timestamp.
	// If the provided value type differs from the type of data being transformed, we will first attempt converting the type of the data to be transformed to match the type of the bound before comparing.
	// See https://cloud.google.com/dlp/docs/concepts-bucketing to learn more.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	BucketingConfig []BucketingConfigParameters `json:"bucketingConfig,omitempty" tf:"bucketing_config,omitempty"`

	// Partially mask a string by replacing a given number of characters with a fixed character.
	// Masking can start from the beginning or end of the string.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CharacterMaskConfig []PrimitiveTransformationCharacterMaskConfigParameters `json:"characterMaskConfig,omitempty" tf:"character_mask_config,omitempty"`

	// Pseudonymization method that generates deterministic encryption for the given input. Outputs a base64 encoded representation of the encrypted output. Uses AES-SIV based on the RFC https://tools.ietf.org/html/rfc5297.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoDeterministicConfig []PrimitiveTransformationCryptoDeterministicConfigParameters `json:"cryptoDeterministicConfig,omitempty" tf:"crypto_deterministic_config,omitempty"`

	// Pseudonymization method that generates surrogates via cryptographic hashing. Uses SHA-256. The key size must be either 32 or 64 bytes.
	// Outputs a base64 encoded representation of the hashed output (for example, L7k0BHmF1ha5U3NfGykjro4xWi1MPVQPjhMAZbSV9mM=).
	// Currently, only string and integer values can be hashed.
	// See https://cloud.google.com/dlp/docs/pseudonymization to learn more.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoHashConfig []CryptoHashConfigParameters `json:"cryptoHashConfig,omitempty" tf:"crypto_hash_config,omitempty"`

	// Replaces an identifier with a surrogate using Format Preserving Encryption (FPE) with the FFX mode of operation; however when used in the content.reidentify API method, it serves the opposite function by reversing the surrogate back into the original identifier. The identifier must be encoded as ASCII. For a given crypto key and context, the same identifier will be replaced with the same surrogate. Identifiers must be at least two characters long. In the case that the identifier is the empty string, it will be skipped. See https://cloud.google.com/dlp/docs/pseudonymization to learn more.
	// Note: We recommend using CryptoDeterministicConfig for all use cases which do not require preserving the input alphabet space and size, plus warrant referential integrity.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoReplaceFfxFpeConfig []PrimitiveTransformationCryptoReplaceFfxFpeConfigParameters `json:"cryptoReplaceFfxFpeConfig,omitempty" tf:"crypto_replace_ffx_fpe_config,omitempty"`

	// Shifts dates by random number of days, with option to be consistent for the same context. See https://cloud.google.com/dlp/docs/concepts-date-shifting to learn more.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DateShiftConfig []DateShiftConfigParameters `json:"dateShiftConfig,omitempty" tf:"date_shift_config,omitempty"`

	// Buckets values based on fixed size ranges. The Bucketing transformation can provide all of this functionality, but requires more configuration. This message is provided as a convenience to the user for simple bucketing strategies.
	// The transformed value will be a hyphenated string of {lower_bound}-{upper_bound}. For example, if lower_bound = 10 and upper_bound = 20, all values that are within this bucket will be replaced with "10-20".
	// This can be used on data of type: double, long.
	// If the bound Value type differs from the type of data being transformed, we will first attempt converting the type of the data to be transformed to match the type of the bound before comparing.
	// See https://cloud.google.com/dlp/docs/concepts-bucketing to learn more.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	FixedSizeBucketingConfig []FixedSizeBucketingConfigParameters `json:"fixedSizeBucketingConfig,omitempty" tf:"fixed_size_bucketing_config,omitempty"`

	// Redact a given value. For example, if used with an InfoTypeTransformation transforming PHONE_NUMBER, and input 'My phone number is 206-555-0123', the output would be 'My phone number is '.
	// +kubebuilder:validation:Optional
	RedactConfig []RedactConfigParameters `json:"redactConfig,omitempty" tf:"redact_config,omitempty"`

	// Replace each input value with a given value.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	ReplaceConfig []PrimitiveTransformationReplaceConfigParameters `json:"replaceConfig,omitempty" tf:"replace_config,omitempty"`

	// Replace with a value randomly drawn (with replacement) from a dictionary.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	ReplaceDictionaryConfig []PrimitiveTransformationReplaceDictionaryConfigParameters `json:"replaceDictionaryConfig,omitempty" tf:"replace_dictionary_config,omitempty"`

	// For use with Date, Timestamp, and TimeOfDay, extract or preserve a portion of the value.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	TimePartConfig []TimePartConfigParameters `json:"timePartConfig,omitempty" tf:"time_part_config,omitempty"`
}

type FieldsObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type FieldsParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type FixedSizeBucketingConfigObservation struct {

	// Size of each bucket (except for minimum and maximum buckets).
	// So if lower_bound = 10, upper_bound = 89, and bucketSize = 10, then the following buckets would be used: -10, 10-20, 20-30, 30-40, 40-50, 50-60, 60-70, 70-80, 80-89, 89+.
	// Precision up to 2 decimals works.
	BucketSize *float64 `json:"bucketSize,omitempty" tf:"bucket_size,omitempty"`

	// Lower bound value of buckets.
	// All values less than lower_bound are grouped together into a single bucket; for example if lower_bound = 10, then all values less than 10 are replaced with the value "-10".
	// The lower_bound block must only contain one argument. See the fixed_size_bucketing_config block description for more information about choosing a data type.
	// Structure is documented below.
	LowerBound []LowerBoundObservation `json:"lowerBound,omitempty" tf:"lower_bound,omitempty"`

	// Upper bound value of buckets.
	// All values greater than upper_bound are grouped together into a single bucket; for example if upper_bound = 89, then all values greater than 89 are replaced with the value "89+".
	// The upper_bound block must only contain one argument. See the fixed_size_bucketing_config block description for more information about choosing a data type.
	// Structure is documented below.
	UpperBound []UpperBoundObservation `json:"upperBound,omitempty" tf:"upper_bound,omitempty"`
}

type FixedSizeBucketingConfigParameters struct {

	// Size of each bucket (except for minimum and maximum buckets).
	// So if lower_bound = 10, upper_bound = 89, and bucketSize = 10, then the following buckets would be used: -10, 10-20, 20-30, 30-40, 40-50, 50-60, 60-70, 70-80, 80-89, 89+.
	// Precision up to 2 decimals works.
	// +kubebuilder:validation:Required
	BucketSize *float64 `json:"bucketSize" tf:"bucket_size,omitempty"`

	// Lower bound value of buckets.
	// All values less than lower_bound are grouped together into a single bucket; for example if lower_bound = 10, then all values less than 10 are replaced with the value "-10".
	// The lower_bound block must only contain one argument. See the fixed_size_bucketing_config block description for more information about choosing a data type.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	LowerBound []LowerBoundParameters `json:"lowerBound" tf:"lower_bound,omitempty"`

	// Upper bound value of buckets.
	// All values greater than upper_bound are grouped together into a single bucket; for example if upper_bound = 89, then all values greater than 89 are replaced with the value "89+".
	// The upper_bound block must only contain one argument. See the fixed_size_bucketing_config block description for more information about choosing a data type.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	UpperBound []UpperBoundParameters `json:"upperBound" tf:"upper_bound,omitempty"`
}

type ImageTransformationsObservation struct {

	// For determination of how redaction of images should occur.
	// Structure is documented below.
	Transforms []TransformsObservation `json:"transforms,omitempty" tf:"transforms,omitempty"`
}

type ImageTransformationsParameters struct {

	// For determination of how redaction of images should occur.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	Transforms []TransformsParameters `json:"transforms" tf:"transforms,omitempty"`
}

type InfoTypeTransformationsObservation struct {

	// Transformation for each infoType. Cannot specify more than one for a given infoType.
	// Structure is documented below.
	Transformations []TransformationsObservation `json:"transformations,omitempty" tf:"transformations,omitempty"`
}

type InfoTypeTransformationsParameters struct {

	// Transformation for each infoType. Cannot specify more than one for a given infoType.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	Transformations []TransformationsParameters `json:"transformations" tf:"transformations,omitempty"`
}

type InfoTypesObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type InfoTypesParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Required
	Name *string `json:"name" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	// +kubebuilder:validation:Optional
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type KMSWrappedObservation struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	CryptoKeyName *string `json:"cryptoKeyName,omitempty" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	WrappedKey *string `json:"wrappedKey,omitempty" tf:"wrapped_key,omitempty"`
}

type KMSWrappedParameters struct {

	// The resource name of the KMS CryptoKey to use for unwrapping.
	// +kubebuilder:validation:Required
	CryptoKeyName *string `json:"cryptoKeyName" tf:"crypto_key_name,omitempty"`

	// The wrapped data crypto key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	WrappedKey *string `json:"wrappedKey" tf:"wrapped_key,omitempty"`
}

type LowerBoundDateValueObservation struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type LowerBoundDateValueParameters struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	// +kubebuilder:validation:Optional
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	// +kubebuilder:validation:Optional
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	// +kubebuilder:validation:Optional
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type LowerBoundObservation struct {

	// A boolean value.
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	DateValue []LowerBoundDateValueObservation `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	TimeValue []LowerBoundTimeValueObservation `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type LowerBoundParameters struct {

	// A boolean value.
	// +kubebuilder:validation:Optional
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DateValue []LowerBoundDateValueParameters `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	// +kubebuilder:validation:Optional
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	// +kubebuilder:validation:Optional
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	// +kubebuilder:validation:Optional
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	// +kubebuilder:validation:Optional
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	TimeValue []LowerBoundTimeValueParameters `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +kubebuilder:validation:Optional
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type LowerBoundTimeValueObservation struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type LowerBoundTimeValueParameters struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	// +kubebuilder:validation:Optional
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	// +kubebuilder:validation:Optional
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	// +kubebuilder:validation:Optional
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	// +kubebuilder:validation:Optional
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type MaxDateValueObservation struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type MaxDateValueParameters struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	// +kubebuilder:validation:Optional
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	// +kubebuilder:validation:Optional
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	// +kubebuilder:validation:Optional
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type MaxObservation struct {

	// A boolean value.
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	DateValue []MaxDateValueObservation `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	TimeValue []MaxTimeValueObservation `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type MaxParameters struct {

	// A boolean value.
	// +kubebuilder:validation:Optional
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DateValue []MaxDateValueParameters `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	// +kubebuilder:validation:Optional
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	// +kubebuilder:validation:Optional
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	// +kubebuilder:validation:Optional
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	// +kubebuilder:validation:Optional
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	TimeValue []MaxTimeValueParameters `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +kubebuilder:validation:Optional
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type MaxTimeValueObservation struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type MaxTimeValueParameters struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	// +kubebuilder:validation:Optional
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	// +kubebuilder:validation:Optional
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	// +kubebuilder:validation:Optional
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	// +kubebuilder:validation:Optional
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type MinDateValueObservation struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type MinDateValueParameters struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	// +kubebuilder:validation:Optional
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	// +kubebuilder:validation:Optional
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	// +kubebuilder:validation:Optional
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type MinObservation struct {

	// A boolean value.
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	DateValue []MinDateValueObservation `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	TimeValue []MinTimeValueObservation `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type MinParameters struct {

	// A boolean value.
	// +kubebuilder:validation:Optional
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DateValue []MinDateValueParameters `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	// +kubebuilder:validation:Optional
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	// +kubebuilder:validation:Optional
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	// +kubebuilder:validation:Optional
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	// +kubebuilder:validation:Optional
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	TimeValue []MinTimeValueParameters `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +kubebuilder:validation:Optional
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type MinTimeValueObservation struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type MinTimeValueParameters struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	// +kubebuilder:validation:Optional
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	// +kubebuilder:validation:Optional
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	// +kubebuilder:validation:Optional
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	// +kubebuilder:validation:Optional
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type NewValueDateValueObservation struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type NewValueDateValueParameters struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	// +kubebuilder:validation:Optional
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	// +kubebuilder:validation:Optional
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	// +kubebuilder:validation:Optional
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type NewValueObservation struct {

	// A boolean value.
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	DateValue []DateValueObservation `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	IntegerValue *float64 `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	TimeValue []TimeValueObservation `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type NewValueParameters struct {

	// A boolean value.
	// +kubebuilder:validation:Optional
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DateValue []DateValueParameters `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	// +kubebuilder:validation:Optional
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	// +kubebuilder:validation:Optional
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	// +kubebuilder:validation:Optional
	IntegerValue *float64 `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	// +kubebuilder:validation:Optional
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	TimeValue []TimeValueParameters `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +kubebuilder:validation:Optional
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type NewValueTimeValueObservation struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type NewValueTimeValueParameters struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	// +kubebuilder:validation:Optional
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	// +kubebuilder:validation:Optional
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	// +kubebuilder:validation:Optional
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	// +kubebuilder:validation:Optional
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type PrimitiveTransformationCharacterMaskConfigObservation struct {
	CharactersToIgnore []CharacterMaskConfigCharactersToIgnoreObservation `json:"charactersToIgnore,omitempty" tf:"characters_to_ignore,omitempty"`

	// is *
	MaskingCharacter *string `json:"maskingCharacter,omitempty" tf:"masking_character,omitempty"`

	// 4
	NumberToMask *float64 `json:"numberToMask,omitempty" tf:"number_to_mask,omitempty"`

	// is false
	ReverseOrder *bool `json:"reverseOrder,omitempty" tf:"reverse_order,omitempty"`
}

type PrimitiveTransformationCharacterMaskConfigParameters struct {

	// +kubebuilder:validation:Optional
	CharactersToIgnore []CharacterMaskConfigCharactersToIgnoreParameters `json:"charactersToIgnore,omitempty" tf:"characters_to_ignore,omitempty"`

	// is *
	// +kubebuilder:validation:Optional
	MaskingCharacter *string `json:"maskingCharacter,omitempty" tf:"masking_character,omitempty"`

	// 4
	// +kubebuilder:validation:Optional
	NumberToMask *float64 `json:"numberToMask,omitempty" tf:"number_to_mask,omitempty"`

	// is false
	// +kubebuilder:validation:Optional
	ReverseOrder *bool `json:"reverseOrder,omitempty" tf:"reverse_order,omitempty"`
}

type PrimitiveTransformationCryptoDeterministicConfigObservation struct {

	// Points to the field that contains the context, for example, an entity id.
	// If set, must also set cryptoKey. If set, shift will be consistent for the given context.
	// Structure is documented below.
	Context []CryptoDeterministicConfigContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	CryptoKey []CryptoDeterministicConfigCryptoKeyObservation `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`

	// The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate
	// For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc'
	// This annotation identifies the surrogate when inspecting content using the custom infoType SurrogateType. This facilitates reversal of the surrogate when it occurs in free text.
	// In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE
	// Structure is documented below.
	SurrogateInfoType []CryptoDeterministicConfigSurrogateInfoTypeObservation `json:"surrogateInfoType,omitempty" tf:"surrogate_info_type,omitempty"`
}

type PrimitiveTransformationCryptoDeterministicConfigParameters struct {

	// Points to the field that contains the context, for example, an entity id.
	// If set, must also set cryptoKey. If set, shift will be consistent for the given context.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Context []CryptoDeterministicConfigContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoKey []CryptoDeterministicConfigCryptoKeyParameters `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`

	// The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate
	// For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc'
	// This annotation identifies the surrogate when inspecting content using the custom infoType SurrogateType. This facilitates reversal of the surrogate when it occurs in free text.
	// In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	SurrogateInfoType []CryptoDeterministicConfigSurrogateInfoTypeParameters `json:"surrogateInfoType,omitempty" tf:"surrogate_info_type,omitempty"`
}

type PrimitiveTransformationCryptoReplaceFfxFpeConfigContextObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type PrimitiveTransformationCryptoReplaceFfxFpeConfigContextParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type PrimitiveTransformationCryptoReplaceFfxFpeConfigCryptoKeyObservation struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	KMSWrapped []CryptoReplaceFfxFpeConfigCryptoKeyKMSWrappedObservation `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	Transient []CryptoReplaceFfxFpeConfigCryptoKeyTransientObservation `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	Unwrapped []CryptoReplaceFfxFpeConfigCryptoKeyUnwrappedObservation `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type PrimitiveTransformationCryptoReplaceFfxFpeConfigCryptoKeyParameters struct {

	// KMS wrapped key.
	// Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt
	// For more information, see Creating a wrapped key.
	// Note: When you use Cloud KMS for cryptographic operations, charges apply.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	KMSWrapped []CryptoReplaceFfxFpeConfigCryptoKeyKMSWrappedParameters `json:"kmsWrapped,omitempty" tf:"kms_wrapped,omitempty"`

	// Transient crypto key. Use this to have a random data crypto key generated. It will be discarded after the request finishes.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Transient []CryptoReplaceFfxFpeConfigCryptoKeyTransientParameters `json:"transient,omitempty" tf:"transient,omitempty"`

	// Unwrapped crypto key. Using raw keys is prone to security risks due to accidentally leaking the key. Choose another type of key if possible.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Unwrapped []CryptoReplaceFfxFpeConfigCryptoKeyUnwrappedParameters `json:"unwrapped,omitempty" tf:"unwrapped,omitempty"`
}

type PrimitiveTransformationCryptoReplaceFfxFpeConfigObservation struct {

	// Common alphabets.
	// Possible values are: FFX_COMMON_NATIVE_ALPHABET_UNSPECIFIED, NUMERIC, HEXADECIMAL, UPPER_CASE_ALPHA_NUMERIC, ALPHA_NUMERIC.
	CommonAlphabet *string `json:"commonAlphabet,omitempty" tf:"common_alphabet,omitempty"`

	// Points to the field that contains the context, for example, an entity id.
	// If set, must also set cryptoKey. If set, shift will be consistent for the given context.
	// Structure is documented below.
	Context []PrimitiveTransformationCryptoReplaceFfxFpeConfigContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	CryptoKey []PrimitiveTransformationCryptoReplaceFfxFpeConfigCryptoKeyObservation `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`

	// This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports. This happens before/after encryption/decryption. Each character listed must appear only once. Number of characters must be in the range [2, 95]. This must be encoded as ASCII. The order of characters does not matter. The full list of allowed characters is:
	// 0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~`!@#$%^&*()_-+={[}]|:;"'<,>.?/
	CustomAlphabet *string `json:"customAlphabet,omitempty" tf:"custom_alphabet,omitempty"`

	// The native way to select the alphabet. Must be in the range [2, 95].
	Radix *float64 `json:"radix,omitempty" tf:"radix,omitempty"`

	// The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate
	// For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc'
	// This annotation identifies the surrogate when inspecting content using the custom infoType SurrogateType. This facilitates reversal of the surrogate when it occurs in free text.
	// In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE
	// Structure is documented below.
	SurrogateInfoType []PrimitiveTransformationCryptoReplaceFfxFpeConfigSurrogateInfoTypeObservation `json:"surrogateInfoType,omitempty" tf:"surrogate_info_type,omitempty"`
}

type PrimitiveTransformationCryptoReplaceFfxFpeConfigParameters struct {

	// Common alphabets.
	// Possible values are: FFX_COMMON_NATIVE_ALPHABET_UNSPECIFIED, NUMERIC, HEXADECIMAL, UPPER_CASE_ALPHA_NUMERIC, ALPHA_NUMERIC.
	// +kubebuilder:validation:Optional
	CommonAlphabet *string `json:"commonAlphabet,omitempty" tf:"common_alphabet,omitempty"`

	// Points to the field that contains the context, for example, an entity id.
	// If set, must also set cryptoKey. If set, shift will be consistent for the given context.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Context []PrimitiveTransformationCryptoReplaceFfxFpeConfigContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Causes the shift to be computed based on this key and the context. This results in the same shift for the same context and cryptoKey. If set, must also set context. Can only be applied to table items.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoKey []PrimitiveTransformationCryptoReplaceFfxFpeConfigCryptoKeyParameters `json:"cryptoKey,omitempty" tf:"crypto_key,omitempty"`

	// This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports. This happens before/after encryption/decryption. Each character listed must appear only once. Number of characters must be in the range [2, 95]. This must be encoded as ASCII. The order of characters does not matter. The full list of allowed characters is:
	// 0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz ~`!@#$%^&*()_-+={[}]|:;"'<,>.?/
	// +kubebuilder:validation:Optional
	CustomAlphabet *string `json:"customAlphabet,omitempty" tf:"custom_alphabet,omitempty"`

	// The native way to select the alphabet. Must be in the range [2, 95].
	// +kubebuilder:validation:Optional
	Radix *float64 `json:"radix,omitempty" tf:"radix,omitempty"`

	// The custom infoType to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom infoType followed by the number of characters comprising the surrogate. The following scheme defines the format: info_type_name(surrogate_character_count):surrogate
	// For example, if the name of custom infoType is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc'
	// This annotation identifies the surrogate when inspecting content using the custom infoType SurrogateType. This facilitates reversal of the surrogate when it occurs in free text.
	// In order for inspection to work properly, the name of this infoType must not occur naturally anywhere in your data; otherwise, inspection may find a surrogate that does not correspond to an actual identifier. Therefore, choose your custom infoType name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	SurrogateInfoType []PrimitiveTransformationCryptoReplaceFfxFpeConfigSurrogateInfoTypeParameters `json:"surrogateInfoType,omitempty" tf:"surrogate_info_type,omitempty"`
}

type PrimitiveTransformationCryptoReplaceFfxFpeConfigSurrogateInfoTypeObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type PrimitiveTransformationCryptoReplaceFfxFpeConfigSurrogateInfoTypeParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	// +kubebuilder:validation:Optional
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type PrimitiveTransformationObservation struct {

	// Partially mask a string by replacing a given number of characters with a fixed character.
	// Masking can start from the beginning or end of the string.
	// Structure is documented below.
	CharacterMaskConfig []CharacterMaskConfigObservation `json:"characterMaskConfig,omitempty" tf:"character_mask_config,omitempty"`

	// Pseudonymization method that generates deterministic encryption for the given input. Outputs a base64 encoded representation of the encrypted output. Uses AES-SIV based on the RFC https://tools.ietf.org/html/rfc5297.
	// Structure is documented below.
	CryptoDeterministicConfig []CryptoDeterministicConfigObservation `json:"cryptoDeterministicConfig,omitempty" tf:"crypto_deterministic_config,omitempty"`

	// Replaces an identifier with a surrogate using Format Preserving Encryption (FPE) with the FFX mode of operation; however when used in the content.reidentify API method, it serves the opposite function by reversing the surrogate back into the original identifier. The identifier must be encoded as ASCII. For a given crypto key and context, the same identifier will be replaced with the same surrogate. Identifiers must be at least two characters long. In the case that the identifier is the empty string, it will be skipped. See https://cloud.google.com/dlp/docs/pseudonymization to learn more.
	// Note: We recommend using CryptoDeterministicConfig for all use cases which do not require preserving the input alphabet space and size, plus warrant referential integrity.
	// Structure is documented below.
	CryptoReplaceFfxFpeConfig []CryptoReplaceFfxFpeConfigObservation `json:"cryptoReplaceFfxFpeConfig,omitempty" tf:"crypto_replace_ffx_fpe_config,omitempty"`

	// Replace each input value with a given value.
	// Structure is documented below.
	ReplaceConfig []ReplaceConfigObservation `json:"replaceConfig,omitempty" tf:"replace_config,omitempty"`

	// Replace with a value randomly drawn (with replacement) from a dictionary.
	// Structure is documented below.
	ReplaceDictionaryConfig []ReplaceDictionaryConfigObservation `json:"replaceDictionaryConfig,omitempty" tf:"replace_dictionary_config,omitempty"`

	// Replace each matching finding with the name of the info type.
	ReplaceWithInfoTypeConfig *bool `json:"replaceWithInfoTypeConfig,omitempty" tf:"replace_with_info_type_config,omitempty"`
}

type PrimitiveTransformationParameters struct {

	// Partially mask a string by replacing a given number of characters with a fixed character.
	// Masking can start from the beginning or end of the string.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CharacterMaskConfig []CharacterMaskConfigParameters `json:"characterMaskConfig,omitempty" tf:"character_mask_config,omitempty"`

	// Pseudonymization method that generates deterministic encryption for the given input. Outputs a base64 encoded representation of the encrypted output. Uses AES-SIV based on the RFC https://tools.ietf.org/html/rfc5297.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoDeterministicConfig []CryptoDeterministicConfigParameters `json:"cryptoDeterministicConfig,omitempty" tf:"crypto_deterministic_config,omitempty"`

	// Replaces an identifier with a surrogate using Format Preserving Encryption (FPE) with the FFX mode of operation; however when used in the content.reidentify API method, it serves the opposite function by reversing the surrogate back into the original identifier. The identifier must be encoded as ASCII. For a given crypto key and context, the same identifier will be replaced with the same surrogate. Identifiers must be at least two characters long. In the case that the identifier is the empty string, it will be skipped. See https://cloud.google.com/dlp/docs/pseudonymization to learn more.
	// Note: We recommend using CryptoDeterministicConfig for all use cases which do not require preserving the input alphabet space and size, plus warrant referential integrity.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	CryptoReplaceFfxFpeConfig []CryptoReplaceFfxFpeConfigParameters `json:"cryptoReplaceFfxFpeConfig,omitempty" tf:"crypto_replace_ffx_fpe_config,omitempty"`

	// Replace each input value with a given value.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	ReplaceConfig []ReplaceConfigParameters `json:"replaceConfig,omitempty" tf:"replace_config,omitempty"`

	// Replace with a value randomly drawn (with replacement) from a dictionary.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	ReplaceDictionaryConfig []ReplaceDictionaryConfigParameters `json:"replaceDictionaryConfig,omitempty" tf:"replace_dictionary_config,omitempty"`

	// Replace each matching finding with the name of the info type.
	// +kubebuilder:validation:Optional
	ReplaceWithInfoTypeConfig *bool `json:"replaceWithInfoTypeConfig,omitempty" tf:"replace_with_info_type_config,omitempty"`
}

type PrimitiveTransformationReplaceConfigObservation struct {

	// Replace each input value with a given value.
	// The new_value block must only contain one argument. For example when replacing the contents of a string-type field, only string_value should be set.
	// Structure is documented below.
	NewValue []ReplaceConfigNewValueObservation `json:"newValue,omitempty" tf:"new_value,omitempty"`
}

type PrimitiveTransformationReplaceConfigParameters struct {

	// Replace each input value with a given value.
	// The new_value block must only contain one argument. For example when replacing the contents of a string-type field, only string_value should be set.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	NewValue []ReplaceConfigNewValueParameters `json:"newValue" tf:"new_value,omitempty"`
}

type PrimitiveTransformationReplaceDictionaryConfigObservation struct {

	// A list of words to select from for random replacement. The limits page contains details about the size limits of dictionaries.
	// Structure is documented below.
	WordList []ReplaceDictionaryConfigWordListObservation `json:"wordList,omitempty" tf:"word_list,omitempty"`
}

type PrimitiveTransformationReplaceDictionaryConfigParameters struct {

	// A list of words to select from for random replacement. The limits page contains details about the size limits of dictionaries.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	WordList []ReplaceDictionaryConfigWordListParameters `json:"wordList,omitempty" tf:"word_list,omitempty"`
}

type RecordSuppressionsConditionObservation struct {

	// An expression, consisting of an operator and conditions.
	// Structure is documented below.
	Expressions []ConditionExpressionsObservation `json:"expressions,omitempty" tf:"expressions,omitempty"`
}

type RecordSuppressionsConditionParameters struct {

	// An expression, consisting of an operator and conditions.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Expressions []ConditionExpressionsParameters `json:"expressions,omitempty" tf:"expressions,omitempty"`
}

type RecordSuppressionsObservation struct {

	// A condition that when it evaluates to true will result in the record being evaluated to be suppressed from the transformed content.
	// Structure is documented below.
	Condition []RecordSuppressionsConditionObservation `json:"condition,omitempty" tf:"condition,omitempty"`
}

type RecordSuppressionsParameters struct {

	// A condition that when it evaluates to true will result in the record being evaluated to be suppressed from the transformed content.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	Condition []RecordSuppressionsConditionParameters `json:"condition,omitempty" tf:"condition,omitempty"`
}

type RecordTransformationsObservation struct {

	// Transform the record by applying various field transformations.
	// Structure is documented below.
	FieldTransformations []FieldTransformationsObservation `json:"fieldTransformations,omitempty" tf:"field_transformations,omitempty"`

	// Configuration defining which records get suppressed entirely. Records that match any suppression rule are omitted from the output.
	// Structure is documented below.
	RecordSuppressions []RecordSuppressionsObservation `json:"recordSuppressions,omitempty" tf:"record_suppressions,omitempty"`
}

type RecordTransformationsParameters struct {

	// Transform the record by applying various field transformations.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	FieldTransformations []FieldTransformationsParameters `json:"fieldTransformations,omitempty" tf:"field_transformations,omitempty"`

	// Configuration defining which records get suppressed entirely. Records that match any suppression rule are omitted from the output.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	RecordSuppressions []RecordSuppressionsParameters `json:"recordSuppressions,omitempty" tf:"record_suppressions,omitempty"`
}

type RedactConfigObservation struct {
}

type RedactConfigParameters struct {
}

type RedactionColorObservation struct {

	// The amount of blue in the color as a value in the interval [0, 1].
	Blue *float64 `json:"blue,omitempty" tf:"blue,omitempty"`

	// The amount of green in the color as a value in the interval [0, 1].
	Green *float64 `json:"green,omitempty" tf:"green,omitempty"`

	// The amount of red in the color as a value in the interval [0, 1].
	Red *float64 `json:"red,omitempty" tf:"red,omitempty"`
}

type RedactionColorParameters struct {

	// The amount of blue in the color as a value in the interval [0, 1].
	// +kubebuilder:validation:Optional
	Blue *float64 `json:"blue,omitempty" tf:"blue,omitempty"`

	// The amount of green in the color as a value in the interval [0, 1].
	// +kubebuilder:validation:Optional
	Green *float64 `json:"green,omitempty" tf:"green,omitempty"`

	// The amount of red in the color as a value in the interval [0, 1].
	// +kubebuilder:validation:Optional
	Red *float64 `json:"red,omitempty" tf:"red,omitempty"`
}

type ReplaceConfigNewValueObservation struct {

	// A boolean value.
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	DateValue []NewValueDateValueObservation `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	TimeValue []NewValueTimeValueObservation `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type ReplaceConfigNewValueParameters struct {

	// A boolean value.
	// +kubebuilder:validation:Optional
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DateValue []NewValueDateValueParameters `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	// +kubebuilder:validation:Optional
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	// +kubebuilder:validation:Optional
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	// +kubebuilder:validation:Optional
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	// +kubebuilder:validation:Optional
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	TimeValue []NewValueTimeValueParameters `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +kubebuilder:validation:Optional
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type ReplaceConfigObservation struct {

	// Replace each input value with a given value.
	// The new_value block must only contain one argument. For example when replacing the contents of a string-type field, only string_value should be set.
	// Structure is documented below.
	NewValue []NewValueObservation `json:"newValue,omitempty" tf:"new_value,omitempty"`
}

type ReplaceConfigParameters struct {

	// Replace each input value with a given value.
	// The new_value block must only contain one argument. For example when replacing the contents of a string-type field, only string_value should be set.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	NewValue []NewValueParameters `json:"newValue" tf:"new_value,omitempty"`
}

type ReplaceDictionaryConfigObservation struct {

	// A list of words to select from for random replacement. The limits page contains details about the size limits of dictionaries.
	// Structure is documented below.
	WordList []WordListObservation `json:"wordList,omitempty" tf:"word_list,omitempty"`
}

type ReplaceDictionaryConfigParameters struct {

	// A list of words to select from for random replacement. The limits page contains details about the size limits of dictionaries.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	WordList []WordListParameters `json:"wordList" tf:"word_list,omitempty"`
}

type ReplaceDictionaryConfigWordListObservation struct {

	// Words or phrases defining the dictionary. The dictionary must contain at least one phrase and every phrase must contain at least 2 characters that are letters or digits.
	Words []*string `json:"words,omitempty" tf:"words,omitempty"`
}

type ReplaceDictionaryConfigWordListParameters struct {

	// Words or phrases defining the dictionary. The dictionary must contain at least one phrase and every phrase must contain at least 2 characters that are letters or digits.
	// +kubebuilder:validation:Required
	Words []*string `json:"words" tf:"words,omitempty"`
}

type ReplacementValueDateValueObservation struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type ReplacementValueDateValueParameters struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	// +kubebuilder:validation:Optional
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	// +kubebuilder:validation:Optional
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	// +kubebuilder:validation:Optional
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type ReplacementValueObservation struct {

	// A boolean value.
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	DateValue []ReplacementValueDateValueObservation `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	TimeValue []ReplacementValueTimeValueObservation `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type ReplacementValueParameters struct {

	// A boolean value.
	// +kubebuilder:validation:Optional
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DateValue []ReplacementValueDateValueParameters `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	// +kubebuilder:validation:Optional
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	// +kubebuilder:validation:Optional
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	// +kubebuilder:validation:Optional
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	// +kubebuilder:validation:Optional
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	TimeValue []ReplacementValueTimeValueParameters `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +kubebuilder:validation:Optional
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type ReplacementValueTimeValueObservation struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type ReplacementValueTimeValueParameters struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	// +kubebuilder:validation:Optional
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	// +kubebuilder:validation:Optional
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	// +kubebuilder:validation:Optional
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	// +kubebuilder:validation:Optional
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type SelectedInfoTypesObservation struct {

	// InfoTypes to apply the transformation to. Leaving this empty will apply the transformation to apply to
	// all findings that correspond to infoTypes that were requested in InspectConfig.
	// Structure is documented below.
	InfoTypes []InfoTypesObservation `json:"infoTypes,omitempty" tf:"info_types,omitempty"`
}

type SelectedInfoTypesParameters struct {

	// InfoTypes to apply the transformation to. Leaving this empty will apply the transformation to apply to
	// all findings that correspond to infoTypes that were requested in InspectConfig.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	InfoTypes []InfoTypesParameters `json:"infoTypes" tf:"info_types,omitempty"`
}

type SurrogateInfoTypeObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type SurrogateInfoTypeParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Optional
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	// +kubebuilder:validation:Optional
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type TimePartConfigObservation struct {

	// The part of the time to keep.
	// Possible values are: YEAR, MONTH, DAY_OF_MONTH, DAY_OF_WEEK, WEEK_OF_YEAR, HOUR_OF_DAY.
	PartToExtract *string `json:"partToExtract,omitempty" tf:"part_to_extract,omitempty"`
}

type TimePartConfigParameters struct {

	// The part of the time to keep.
	// Possible values are: YEAR, MONTH, DAY_OF_MONTH, DAY_OF_WEEK, WEEK_OF_YEAR, HOUR_OF_DAY.
	// +kubebuilder:validation:Optional
	PartToExtract *string `json:"partToExtract,omitempty" tf:"part_to_extract,omitempty"`
}

type TimeValueObservation struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type TimeValueParameters struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	// +kubebuilder:validation:Optional
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	// +kubebuilder:validation:Optional
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	// +kubebuilder:validation:Optional
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	// +kubebuilder:validation:Optional
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type TransformationsInfoTypesObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type TransformationsInfoTypesParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Required
	Name *string `json:"name" tf:"name,omitempty"`

	// Optional version name for this InfoType.
	// +kubebuilder:validation:Optional
	Version *string `json:"version,omitempty" tf:"version,omitempty"`
}

type TransformationsObservation struct {

	// InfoTypes to apply the transformation to. Leaving this empty will apply the transformation to apply to
	// all findings that correspond to infoTypes that were requested in InspectConfig.
	// Structure is documented below.
	InfoTypes []TransformationsInfoTypesObservation `json:"infoTypes,omitempty" tf:"info_types,omitempty"`

	// Primitive transformation to apply to the infoType.
	// The primitive_transformation block must only contain one argument, corresponding to the type of transformation.
	// Structure is documented below.
	PrimitiveTransformation []PrimitiveTransformationObservation `json:"primitiveTransformation,omitempty" tf:"primitive_transformation,omitempty"`
}

type TransformationsParameters struct {

	// InfoTypes to apply the transformation to. Leaving this empty will apply the transformation to apply to
	// all findings that correspond to infoTypes that were requested in InspectConfig.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	InfoTypes []TransformationsInfoTypesParameters `json:"infoTypes,omitempty" tf:"info_types,omitempty"`

	// Primitive transformation to apply to the infoType.
	// The primitive_transformation block must only contain one argument, corresponding to the type of transformation.
	// Structure is documented below.
	// +kubebuilder:validation:Required
	PrimitiveTransformation []PrimitiveTransformationParameters `json:"primitiveTransformation" tf:"primitive_transformation,omitempty"`
}

type TransformsObservation struct {

	// Apply transformation to all findings not specified in other ImageTransformation's selectedInfoTypes.
	AllInfoTypes []AllInfoTypesParameters `json:"allInfoTypes,omitempty" tf:"all_info_types,omitempty"`

	// Apply transformation to all text that doesn't match an infoType.
	AllText []AllTextParameters `json:"allText,omitempty" tf:"all_text,omitempty"`

	// The color to use when redacting content from an image. If not specified, the default is black.
	// Structure is documented below.
	RedactionColor []RedactionColorObservation `json:"redactionColor,omitempty" tf:"redaction_color,omitempty"`

	// Apply transformation to the selected infoTypes.
	// Structure is documented below.
	SelectedInfoTypes []SelectedInfoTypesObservation `json:"selectedInfoTypes,omitempty" tf:"selected_info_types,omitempty"`
}

type TransformsParameters struct {

	// Apply transformation to all findings not specified in other ImageTransformation's selectedInfoTypes.
	// +kubebuilder:validation:Optional
	AllInfoTypes []AllInfoTypesParameters `json:"allInfoTypes,omitempty" tf:"all_info_types,omitempty"`

	// Apply transformation to all text that doesn't match an infoType.
	// +kubebuilder:validation:Optional
	AllText []AllTextParameters `json:"allText,omitempty" tf:"all_text,omitempty"`

	// The color to use when redacting content from an image. If not specified, the default is black.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	RedactionColor []RedactionColorParameters `json:"redactionColor,omitempty" tf:"redaction_color,omitempty"`

	// Apply transformation to the selected infoTypes.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	SelectedInfoTypes []SelectedInfoTypesParameters `json:"selectedInfoTypes,omitempty" tf:"selected_info_types,omitempty"`
}

type TransientObservation struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	Name *string `json:"name,omitempty" tf:"name,omitempty"`
}

type TransientParameters struct {

	// Name of the key. This is an arbitrary string used to differentiate different keys. A unique key is generated per name: two separate TransientCryptoKey protos share the same generated key if their names are the same. When the data crypto key is generated, this name is not used in any way (repeating the api call will result in a different key being generated).
	// +kubebuilder:validation:Required
	Name *string `json:"name" tf:"name,omitempty"`
}

type UnwrappedObservation struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	Key *string `json:"key,omitempty" tf:"key,omitempty"`
}

type UnwrappedParameters struct {

	// A 128/192/256 bit key.
	// A base64-encoded string.
	// +kubebuilder:validation:Required
	Key *string `json:"key" tf:"key,omitempty"`
}

type UpperBoundDateValueObservation struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type UpperBoundDateValueParameters struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	// +kubebuilder:validation:Optional
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	// +kubebuilder:validation:Optional
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	// +kubebuilder:validation:Optional
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type UpperBoundObservation struct {

	// A boolean value.
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	DateValue []UpperBoundDateValueObservation `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	TimeValue []UpperBoundTimeValueObservation `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type UpperBoundParameters struct {

	// A boolean value.
	// +kubebuilder:validation:Optional
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DateValue []UpperBoundDateValueParameters `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	// +kubebuilder:validation:Optional
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	// +kubebuilder:validation:Optional
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	// +kubebuilder:validation:Optional
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	// +kubebuilder:validation:Optional
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	TimeValue []UpperBoundTimeValueParameters `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +kubebuilder:validation:Optional
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type UpperBoundTimeValueObservation struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type UpperBoundTimeValueParameters struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	// +kubebuilder:validation:Optional
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	// +kubebuilder:validation:Optional
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	// +kubebuilder:validation:Optional
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	// +kubebuilder:validation:Optional
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type ValueDateValueObservation struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type ValueDateValueParameters struct {

	// Day of month. Must be from 1 to 31 and valid for the year and month, or 0 if specifying a
	// year by itself or a year and month where the day is not significant.
	// +kubebuilder:validation:Optional
	Day *float64 `json:"day,omitempty" tf:"day,omitempty"`

	// Month of year. Must be from 1 to 12, or 0 if specifying a year without a month and day.
	// +kubebuilder:validation:Optional
	Month *float64 `json:"month,omitempty" tf:"month,omitempty"`

	// Year of date. Must be from 1 to 9999, or 0 if specifying a date without a year.
	// +kubebuilder:validation:Optional
	Year *float64 `json:"year,omitempty" tf:"year,omitempty"`
}

type ValueObservation struct {

	// A boolean value.
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	DateValue []ValueDateValueObservation `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	TimeValue []ValueTimeValueObservation `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type ValueParameters struct {

	// A boolean value.
	// +kubebuilder:validation:Optional
	BooleanValue *bool `json:"booleanValue,omitempty" tf:"boolean_value,omitempty"`

	// Represents a whole or partial calendar date.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	DateValue []ValueDateValueParameters `json:"dateValue,omitempty" tf:"date_value,omitempty"`

	// Represents a day of the week.
	// Possible values are: MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, SUNDAY.
	// +kubebuilder:validation:Optional
	DayOfWeekValue *string `json:"dayOfWeekValue,omitempty" tf:"day_of_week_value,omitempty"`

	// A float value.
	// +kubebuilder:validation:Optional
	FloatValue *float64 `json:"floatValue,omitempty" tf:"float_value,omitempty"`

	// An integer value (int64 format)
	// +kubebuilder:validation:Optional
	IntegerValue *string `json:"integerValue,omitempty" tf:"integer_value,omitempty"`

	// A string value.
	// +kubebuilder:validation:Optional
	StringValue *string `json:"stringValue,omitempty" tf:"string_value,omitempty"`

	// Represents a time of day.
	// Structure is documented below.
	// +kubebuilder:validation:Optional
	TimeValue []ValueTimeValueParameters `json:"timeValue,omitempty" tf:"time_value,omitempty"`

	// A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	// +kubebuilder:validation:Optional
	TimestampValue *string `json:"timestampValue,omitempty" tf:"timestamp_value,omitempty"`
}

type ValueTimeValueObservation struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type ValueTimeValueParameters struct {

	// Hours of day in 24 hour format. Should be from 0 to 23.
	// +kubebuilder:validation:Optional
	Hours *float64 `json:"hours,omitempty" tf:"hours,omitempty"`

	// Minutes of hour of day. Must be from 0 to 59.
	// +kubebuilder:validation:Optional
	Minutes *float64 `json:"minutes,omitempty" tf:"minutes,omitempty"`

	// Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
	// +kubebuilder:validation:Optional
	Nanos *float64 `json:"nanos,omitempty" tf:"nanos,omitempty"`

	// Seconds of minutes of the time. Must normally be from 0 to 59.
	// +kubebuilder:validation:Optional
	Seconds *float64 `json:"seconds,omitempty" tf:"seconds,omitempty"`
}

type WordListObservation struct {

	// Words or phrases defining the dictionary. The dictionary must contain at least one phrase and every phrase must contain at least 2 characters that are letters or digits.
	Words []*string `json:"words,omitempty" tf:"words,omitempty"`
}

type WordListParameters struct {

	// Words or phrases defining the dictionary. The dictionary must contain at least one phrase and every phrase must contain at least 2 characters that are letters or digits.
	// +kubebuilder:validation:Required
	Words []*string `json:"words" tf:"words,omitempty"`
}

// DeidentifyTemplateSpec defines the desired state of DeidentifyTemplate
type DeidentifyTemplateSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     DeidentifyTemplateParameters `json:"forProvider"`
}

// DeidentifyTemplateStatus defines the observed state of DeidentifyTemplate.
type DeidentifyTemplateStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        DeidentifyTemplateObservation `json:"atProvider,omitempty"`
}

// +kubebuilder:object:root=true

// DeidentifyTemplate is the Schema for the DeidentifyTemplates API. Allows creation of templates to de-identify content.
// +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status"
// +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status"
// +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name"
// +kubebuilder:printcolumn:name="AGE",type="date",JSONPath=".metadata.creationTimestamp"
// +kubebuilder:subresource:status
// +kubebuilder:resource:scope=Cluster,categories={crossplane,managed,gcp}
type DeidentifyTemplate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.deidentifyConfig)",message="deidentifyConfig is a required parameter"
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.parent)",message="parent is a required parameter"
	Spec   DeidentifyTemplateSpec   `json:"spec"`
	Status DeidentifyTemplateStatus `json:"status,omitempty"`
}

// +kubebuilder:object:root=true

// DeidentifyTemplateList contains a list of DeidentifyTemplates
type DeidentifyTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DeidentifyTemplate `json:"items"`
}

// Repository type metadata.
var (
	DeidentifyTemplate_Kind             = "DeidentifyTemplate"
	DeidentifyTemplate_GroupKind        = schema.GroupKind{Group: CRDGroup, Kind: DeidentifyTemplate_Kind}.String()
	DeidentifyTemplate_KindAPIVersion   = DeidentifyTemplate_Kind + "." + CRDGroupVersion.String()
	DeidentifyTemplate_GroupVersionKind = CRDGroupVersion.WithKind(DeidentifyTemplate_Kind)
)

func init() {
	SchemeBuilder.Register(&DeidentifyTemplate{}, &DeidentifyTemplateList{})
}