#pii

PII masking with Glue DataBrew — the rubric we ended up with

“A rubric that survives contact with auditors is a rubric. Everything else is a draft.”

Open-sourcing the PII Masking Starter Kit

“Get the rubric right, the rest is bookkeeping.”

v2 PRD, Part 3 — identity, payment, PII, compliance

“The PRD's job in the compliance section is to draw a small box around payment data and a smaller box around customer identity, and then design every other system component to stay outside both boxes.”