Azure Cosmos DB now offers Dynamic Data Masking in public preview, a server-side feature that automatically masks sensitive data based on user roles without modifying the underlying database or requiring application changes. The feature supports multiple masking strategies (default, custom string, email) and is configured through role-based access control policies at the container level. Organizations can protect PII and PHI while simplifying compliance requirements, as masking occurs in real-time during query execution while the original data remains unchanged.
Table of contents
What is Dynamic Data Masking?Why is This Important?Key BenefitsHow Does It Work?Learn MoreSort: