Home NewsX Implementing Oracle Data Masking capabilities in Azure PostgreSQL- Flexible Server

Implementing Oracle Data Masking capabilities in Azure PostgreSQL- Flexible Server

by info.odysseyx@gmail.com
0 comment 3 views


introduction

Dynamic data masking is essential when sharing data with third parties or when you need to protect sensitive information such as PII while transferring data from production to downstream environments. By replacing confidential data with virtual or altered data, this technology enhances security and privacy by ensuring that real PII cannot be accessed by developers, vendors, or external partners.

This blog provides guidance for customers moving from Oracle to Azure PostgreSQL (Flexible Server) who want to mask PII or PCI data in a low-level environment. Details how to enable dynamic masking for a user or role. Azure PostgreSQL Flexible Server Uses the ANON (Preview) extension.

Enabling server-level parameters

To enable server-level parameters, navigate to the left panel of the Azure portal and select ‘‘Server Parameters’ In the Settings section.

Search for “.azure. expansion” Then click the checkbox in the Value section. PGCRYPTO and soon Select Save.

VenkatMR_1-1727296505218.png

Once the above is done, search for “shared_preload_libraries”, click the ANON checkbox in the Value section, then click Save.

The above steps will ask you to restart the server.

VenkatMR_2-1727296546734.png

Enable dynamic data masking

Once the server restarts, log into the database using PgAdmin or via psql.

Below is an example of how to enable dynamic masking.

  1. Create a table.
    CREATE TABLE people_new ( id TEXT, firstname TEXT, lastname TEXT, phone TEXT);
  2. Please insert a new record.
    INSERT INTO people_new VALUES ('E1',David, 'Miller','0609110911');
    INSERT INTO people_new VALUES ('E2','Robert', 'Bruce','0708910911');
    
  3. SELECT * FROM people_new;

VenkatMR_3-1727296823626.png

  1. To initialize dynamic masking, run the following statement:
    SELECT anon.start_dynamic_masking();
  2. Create user/role for masked user
    CREATE USER masked_user WITH PASSWORD 'masked_user';
  3. Assign anonymous masking to users/roles
    SECURITY LABEL FOR anon on ROLE masked_user IS 'MASKED';
  4. Create dynamic masking for the phone column in the people_new table.
    SECURITY LABEL FOR anon ON COLUMN people_new.phone IS 'MASKED WITH FUNCTION anon.partial(phone,2,$$*****$$,2)';
  5. Grant full permissions on the people_new table to ‘masked_user’.
    GRANT ALL ON TABLE people_new to masked_user;
  6. If you run the select command as the POSTGRES user, you will see the following results without masking the phone column:

VenkatMR_4-1727297182574.png

10. Log in as ‘masked_user’ and run SELECT * FROM people_new; Since the Phone column is masked, you will find results like this:

VenkatMR_5-1727297341755.png

Disable dynamic masking

To disable dynamic masking, follow these steps:

  1. Issue the stop dynamic masking command as the POSTGRES user.

SELECT anon.stop_dynamic_masking();

2. Log in as ‘masked_user’ and check the values ​​in the people_new table.

SELECT * FROM people_new;

VenkatMR_6-1727297655775.png

You can now see that the column is unmasked.

3. To remove assigned roles and masked capabilities, run the following command:

SELECT anon.remove_masks_for_all_roles();

This will completely remove any created features and any roles assigned to the ‘masked_user’ user.

Feedback and Suggestions

you If you have any feedback or suggestions for improving this data migration asset, please email us. Database Platform Engineering Team.





Source link

You may also like

Leave a Comment

Our Company

Welcome to OdysseyX, your one-stop destination for the latest news and opportunities across various domains.

Newsletter

Subscribe my Newsletter for new blog posts, tips & new photos. Let's stay updated!

Laest News

@2024 – All Right Reserved. Designed and Developed by OdysseyX