S3 File Anonymization ( Data Masking)

Question

Could you please tell me whether there is any AWS service that can mask the content of S3 files? (Data masking/Anonymization).

For Example,

1. Masking Name from   John  to 'abcd'

2. Masking Phone Number from  770012   to 11111
3. Masking Date of Birth from  2020-01-05  to  2000-11-11

Even after masking, the column's format should be preserved. Example, Date of birth should be in date format even after the masking

Thanks & Regards,

Aflah Kanhayi

Answer

Maybe you want to consider looking into these two -

https://aws.amazon.com/blogs/big-data/create-a-secure-data-lake-by-masking-encrypting-data-and-enabling-fine-grained-access-with-aws-lake-formation/

https://aws.amazon.com/about-aws/whats-new/2021/11/aws-glue-databrew-detection-data-masking-transformations/

Answer

Not sure if you are looking to mask data when stored or when retrieved. For the latter, Object Lambda provides option. Take a look at this blog with example:

https://aws.amazon.com/blogs/machine-learning/protect-pii-using-amazon-s3-object-lambda-to-process-and-modify-data-during-retrieval/

Answer

To other good answers, I can add that you can monitor your S3 Buckets using AWS Macie to detect PIIs.

Then you can trigger lambda for findings to anonymize it because AWS Macie is sending events through EventBridge. You can find more [here](https://docs.aws.amazon.com/macie/latest/user/findings-monitor-events-eventbridge.html).

S3 File Anonymization ( Data Masking)

Contenido relevante