Configure Data Masking in Azure SQL Database

Scenario

You work for a local Retail chain managing client data. In the wake of some internal audits it has been determined that there is a need for data masking on client databases used in marketing.

You have been tasked with implementing a masking solution that meets the following requirements:

• Provide a masking scheme that masks all but the first letter of clients last names
• Provide an Email mask for customer email address
• Provide a complete mask for customer phone.

Finally, create a test user and log in to confirm proper function.

Instructions

• Log in to the live environment with the provided Azure Labs credentials.
• Create a SQL Databases
  • Standard 10 DTUs ○ SQL Server (use a unique name) ○ East US region ○ Enable sample database
• Create a user to test Data Mask in Azure Data Studio using this query: CREATE USER TestUser WITHOUT LOGIN;
  GRANT SELECT ON SalesLT.Customer TO TestUser;
• Configure masks as described in scenario requirements
• Test Data Mask in Azure Data Studio using the created user: EXECUTE AS USER = 'TestUser';
  SELECT * FROM SalesLT.Customer;
  REVERT;

Tools

• To Install Azure Data Studio download from Microsoft: https://docs.microsoft.com/en-us/sql/azure-data-studio/download?view=sql-server-ver15

For detailed instructions on how to complete these tasks, expand each learning objective below, or click the Guide tab above the video player.