Google Apps Script 数据区域(Data Regions)支持现已正式公开发布
英文标题:Data regions support for Google Apps Script now generally available
Google 宣布 Google Apps Script 的数据区域(Data Regions)功能现已正式公开发布(GA)。该功能允许组织通过控制静态数据存储和运行时处理的地理位置,全面满足企业内部合规、法律监管及数据主权要求。Enterprise Plus 和 Frontline Plus 用户可获得区域内数据存储与处理支持,Education 系列版本则支持区域内存储。此外,Google 计划于 2026 年 9 月起逐步停用开启特定合规开关租户下的非区域化 Apps Script 服务。
20.3 KB
1.5 MB
73.0 KB
24.0 KB
中文
数据区域(Data regions)对于帮助组织满足内部合规、法律、监管以及数据主权要求至关重要,它能够严格控制所涵盖数据的静态存储(data at rest)和数据处理(data processing)所在的地理位置。将这些控制措施扩展到 Apps Script 后,包括高度受监管行业及公共部门在内的各组织可以更放心地构建、部署和自动化企业工作流,确保其脚本数据和执行完全保留在指定的地理边界之内。
当数据区域策略应用于某个单位部门(OU)或群组时,Apps Script 的数据存储和运行时执行将严格遵循所指定的区域:
- 静态数据(Data at rest): 脚本项目文件、代码定义、清单配置、触发器元数据以及键值存储(例如 Property Service 和 Cache Service)都将存储在指定的地理区域内。
- 数据处理(Data processing): 脚本执行、容器绑定(container-bound)自动化及相关的运行时操作均在所选区域内进行处理。
关于非区域化服务的注意事项:
随着 Google Apps Script 向区域化数据驻留模型过渡,对于在管理控制台(Admin console)的数据区域高级设置中启用了 Drive 和 Docs 停用开关的组织,非区域化的 Apps Script 服务将于 2026 年 9 月开始被停用。了解有关停用非区域化服务的更多信息。
为 Apps Script 启用数据区域支持(位于 Drive & Docs 下)
使用入门(Getting started)
- 管理员(Admins): Apps Script 会自动遵循您在管理控制台(路径为:Menu > Data > Compliance > Data Regions)中配置的现有组织数据位置策略。
- 最终用户(End users): 此功能无需最终用户进行任何设置。脚本项目的创建和执行将自动遵循管理员分配给该用户的数据区域策略。针对自定义云端日志(cloud logging)和外部服务,开发者可以参考 Apps Script Cloud Projects 指南 中的建议。
发布节奏(Rollout pace)
适用版本(Availability)
- Enterprise: Enterprise Plus(提供区域内数据存储和处理)
- Education: Education Standard 和 Education Plus(仅提供区域内数据存储)
- 其他版本: Frontline Plus(提供区域内数据存储和处理)
资源(Resources)
English / 原文
Data regions are critical for helping organizations meet internal compliance, legal, regulatory, and data sovereignty obligations by controlling the geographic location of covered data at rest and through data processing. Expanding these controls to Apps Script allows organizations—including those in highly regulated industries and the public sector—to build, deploy, and automate enterprise workflows with confidence that their script data and executions remain within designated geographic boundaries.
When a data regions policy is applied to an organizational unit or group, Apps Script data storage and runtime execution adhere to the specified region:
- Data at rest: Script project files, code definitions, manifest configurations, trigger metadata, and key-value storage (such as Property Service and Cache Service) are stored within the designated geographic region.
- Data processing: Script executions, container-bound automations, and associated runtime operations are processed within the selected region.
Note on non-regionalized services:
As Google Apps Script transitions to a regionalized data residency model, non-regionalized Apps Script services will be disabled starting in September 2026 for organizations that turn on the Drive and Docs disablement toggle in data regions advanced settings in the Admin console. Learn more about disabling non-regionalized services.
Enabling Data regions support for Apps Script (Under Drive & Docs)
Getting started
- Admins: Apps Script automatically adheres to your existing organizational data location policies configured in the Admin console under Menu > Data > Compliance > Data Regions.
- End users: There is no end user setting for this feature. Script project creation and executions will automatically follow the data region policy assigned to the user by their administrator. For custom cloud logging and external services, developers can review recommendations in the Apps Script Cloud Projects guide.
Rollout pace
Availability
- Enterprise: Enterprise Plus (provides in-region data storage and processing)
- Education: Education Standard and Education Plus (provides in-region data storage only)
- Other Editions: Frontline Plus (provides in-region data storage and processing)
