Dynamic data masking (DDM) is a
server-side, policy-based security feature in Azure Cosmos DB that
helps your organization protect sensitive data from unauthorized
access. DDM dynamically masks data for nonprivileged users, ensuring that
sensitive information is redacted in real time before being presented to
applications, while the original data remains unchanged in the
database.
DDM helps your organization
meet security, compliance, and regulatory requirements by limiting
exposure of sensitive data such as Personally Identifiable
Information (PII) and Protected Health Information (PHI).
Learn more.