SnowPro Advanced Architect

By Snowflake · Question Mode

QuestionQ1

Secure Data Sharing and Consumption

The following table is present in the production database:

Question Image

A regulatory requirement requires the company to mask the username for events older than six months, determined from the current date when the data is queried.

How can this requirement be met without duplicating the event data, while ensuring it is applied when creating views from the table or cloning the table?

Explanation

A conditional masking policy can mask username dynamically at query time based on event_timestamp, using a condition that compares the event time with the current date minus six months. Attaching the policy to the base-table column makes the masking apply wherever that column is queried, including through views, and preserves the policy association for cloned table metadata. Row access policies restrict which rows are visible, rather than masking individual column values.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!