[Spotlight Feature] Enhanced Data Export API general availability and improvements

[Spotlight Feature] Enhanced Data Export API general availability and improvements

The Data Export API is now GA and introduces significant security and capability improvements. This feature facilitates the bulk export of your security data from Google SecOps to a Google Cloud Storage bucket that you control, and it provides a more secure and scalable data archival experience than the legacy Data Export API feature.

Here's what's new:

• Advanced data filtering: the API now lets you additionally scope export jobs using namespaces and ingestion labels. • Zero-trust security (customer-managed encryption keys): full integration with Google Cloud Key Management Service (KMS) ensures that all exported data is encrypted with customer-managed keys. • Identity-aware extraction (RBAC): export jobs now inherit the data RBAC scope of users creating an export job, preventing unauthorized data extraction.

For more information, see Data Export API (enhanced).