Raghavendra Prakash
Raghavendra Prakash

Reputation: 175

Cloud Pub/Sub is available for a specific region. What does this mean? Please confirm

Does the release notes statement that Cloud pub/sub is available now in a specific region mean that the data movement (pushing into the topic, subscribing to a topic, storing message) happens within that region only? GDPR requirement (Data residency) that data shall not move from the geography where the data originated from. Please confirm.

Upvotes: 4

Views: 3544

Answers (2)

Kir Titievsky
Kir Titievsky

Reputation: 361

Pub/Sub now supports controlling where your message data is stored. Specifically, a topic now has a configurable message storage policy which is a list of GCP regions where Pub/Sub is allowed to store message data on disk. When a message is published to a region not in this list, the request is forwarded to the nearest allowed region for processing. The policy can be configured on a topic or as an organizational policy for a project, project folder or an entire organization. When an organization policy is configured, individual topic policy can be changed only in ways that do not violate the organization policy. See: https://cloud.google.com/pubsub/docs/resource-location-restriction.

Upvotes: 2

Google Cloud Pub/Sub is a global service, available from everywhere. It is not possible to choose where you want your Pub/Sub service to be, but it will be in the closest region to your project location. The fact that is available in a new region means that now that region has the necessary infrastructure to host a Pub/Sub service.

Here you can see the location of Google Cloud products, and also the release notes on Pub/Sub

[EDIT]

Despite this, there are some ways to help you ensure compliance:

  • As mentioned above, Pub/Sub takes the best effort to keep your data in the closest location to you the source of publication, and once it is stored, that data will not moved without your explicit action.
  • Pub/Sub provides monitoring on data storage location, thus you can track any potential violations and take action by discarding the backlog using Pub/Sub's seek's functionality or ensuring that it is quickly processed.
  • Risk can be limited by reducing message retention duration.

Upvotes: 5

Related Questions