Automated PII redaction for Amazon RDS for PostgreSQL audit logs

A serverless pipeline on AWS that irreversibly redacts PII (SSNs, credit cards, emails, names, and 30+ other types) from Amazon RDS for PostgreSQL pgAudit logs before storing them in S3 for querying via Athena. Unlike CloudWatch Logs Data Protection's reversible masking, this pipeline uses Amazon Comprehend and AWS Step Functions to permanently remove sensitive data, making the archive suitable for GDPR, HIPAA, and PCI-DSS compliance. The entire solution deploys via a single CloudFormation template with three deployment options (console, CLI, or script). Cost ranges from ~$73/month at low activity to ~$161/month at high volume, dominated by infrastructure and Comprehend usage.

Source: https://aws.amazon.com/blogs/database/automated-pii-redaction-for-amazon-rds-for-postgresql-audit-logs. 8sync News only summarizes and links out; content copyright belongs to the authors and original sources.