Implementing dynamic data masking
Dynamic data masking (DDM) (https://docs.aws.amazon.com/redshift/latest/dg/t_ddm.html) lets you hide sensitive data. It is often used to meet regulations or privacy standards. DDM allows you to control how sensitive data is displayed, based on a user’s permissions. This is done at the time the data is accessed, not when it is stored. DDM is an alternative to permanently obscuring the data during the data loading process. With DDM, you don’t need to modify your data pipelines. You set up masking policies that determine who can see what data. These policies are attached to tables and columns. The policies apply to individual users, roles, or everyone. DDM makes it easier to adapt to changing privacy requirements, without needing to change your data transformations, underlying data, or application queries.
Using DDM and Amazon Redshift Lambda User-Defined Functions (https://docs.aws.amazon.com/redshift/latest/dg/udf-creating-a-lambda...