Hands-On Security in DevOps

Data masking

Data masking is the process of obfuscating original/sensitive data to protect it. There are five typical key scenarios that require data masking. Different tools are required based on different roles or usage scenarios:

Scenario	Involved roles	Required tools/modules
The application receives data and will do data masking based on defined policies	Developer	Data masking modules Data masking policies
Define the PII data tag and access policies	DBA	PII metadata definition PII access policies
Query results with data masking based on defined PII tags and access policies	Data query users	Dynamic data masking
The operation team may monitor and check if there is any PII in data, files, ...