Data movement from prod to dev with anonymization of PII

You can use Amazon Macie to identify PII data that is stored in S3: https://docs.aws.amazon.com/macie/latest/userguide/macie-classify-data.html

For data in RDS/Dynamo, you would have to export that into S3 and then use Macie.

Once you identify, you can then implement your own logic (perhaps using AWS Glue) to anonymize data and then move it back into a dev cluster.