Administrator Guide

10.4.0
- 10.5
- 10.4.1

Back Next

Configuring Data Masking Rules in Dynamic Data Masking

This section describes how to configure security rules in Dynamic Data Masking.

Data Integration Hub

uses these rules to mask data that are requested by subscription. Security rules specify the technique that the Dynamic Data Masking rule engine uses to mask data. Security rules consist of a matcher, a rule action, and a processing action. Use security rules to mask data in a specific row or to mask an entire column. For example, you can create a security rule that rewrites SQL requests that reference the Social Security column from the Employee table.

For more information about creating security rules, see the

Informatica Dynamic Data Masking User Guide

Perform the following steps to define a security rule in Dynamic Data Masking:

Append a connection rule to the connection rules you created in the Configuring Dynamic Data Masking procedure as follows:

In the Management Console, select the Dynamic Data Masking service that you want to add the connection rule and click

Tree

Connection Rules

The

Rule Editor

window is displayed.

Select

Action

Apend Rule

The

Apend Rule

window is displayed.

Enter the following details to create the second connection rule that redirects to the data masking Security RuleSet that the connection rule needs to execute:

The first connection rule is created in Configuring Dynamic Data Masking.

Rule Name

. Enter the name of the rule.

Identify incoming connections using

. Select

All Incoming Connections

Apply Action on Incoming Connection

. Select

Use Rule Set

Rule Set Name

. Enter a name for the ruleset. You will further use the same name while you create the security ruleset in the next step. For example,

MaskEmpResultSet

Processing Action: When Rule is matched

. Select

Continue

Click

Connection Rules are saved.

Perform the following steps to create a ruleset.

In the Management Console, select the Dynamic Data Masking service that you want to add the connection rule to, and click

Tree

Add RuleSet

The

Add Ruleset

window is displayed.

Enter the name of the security rule set that you gave as the Ruleset Name in the previous step and click

. For example,

MaskEmpResultSet

Within this rule set, create a rule or rules to match the column name in the result set that you want to mask, and specify the masking action.

In the Management Console, click the security rule set that you created in the previous step.

Select

Tree

Security Rule Set

The Rule Editor window is displayed.

Click

Action

Apend Rule

and update the following information:

Rule Name

. Enter a name for the rule.

Matching Method.

Select

Text

Text Description

. Provide the name of the application that is defined in

Data Integration Hub

enclosed by the

symbol. For example, enter

%DataMaskingApp%

In the

Action

section, define masking rules as required.

Action Type

. Select Mask

Table Name

. Enter the name of the table that you have defined in the topic that maps to the application.

Column Name

. Enter the name of the column that you want to mask. For example,

Credit Card Number

Masking Function

. Enter

****

Click

to save the ruleset.

The server masks data according to rules defined in Dynamic Data Masking and returns results to the subscription target. Considering the example values used in this procedure, credit card number of employees is replaced with **** when an application subscribes to the

DataMaskingApp

application.

Masking Data in Data Integration Hub

Download Guide

Watch

Comments

Communities

Knowledge Base

Success Portal