Amazon Aurora PostgreSQL introduces dynamic data masking

Amazon Aurora PostgreSQL-Compatible Edition

Now supports dynamic data masking through the new pg_columnmask extension, simplifying the protection of sensitive data in your database. This extension enables column-level protection that complements PostgreSQL's native row-level security and column level grants. You can control access to sensitive data through SQL-based masking policies and define how data appears to users at query time based on their roles, helping you comply with data privacy regulations like GDPR, HIPAA, and PCI DSS.

With pg_columnmask, you can create flexible masking policies using built-in or user-defined functions. You can completely hide information, replace partial values with wildcards, or define custom masking approaches. Further, you can apply multiple masking policies to a single column and control their precedence using weights. pg_columnmask helps protect data in complex queries with WHERE, JOIN, ORDER BY, or GROUP BY clauses. Data is masked at the database level during query processing, leaving stored data unmodified.

pg_columnmask is available for Aurora PostgreSQL version 16.10 and higher, and 17.6 and higher in all AWS Regions where Aurora PostgreSQL is available.

What to do

• Review the blog post for more information.
• Visit the technical documentation to learn how to implement dynamic data masking.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.