普里瓦塞拉：将高级数据安全治理应用于数据砖 Unity 目录.pdf

1、Don Bosco DuraiCo-founder&CTOApplying Advanced Data Security Governance with Databricks Unity Catalog Agenda 2023 Privicera.Confidential.All Rights Reserved.010203Databricks Unity Catalog-OverviewPrivaeras Governed Data Stewardship (GDS)Privacera AI Governance(PAIG)2023 Privacera.Confidential.All Ri

2、ghts Reserved.Single Pane of Glass Data Access&Security GovernanceData Sources&StorageComputeContext Owner Steward Consumer Governor InfosecAI GovernanceGoverned Data StewardshipetcSolutions/AppsUnified Data Security PlatformDiscoverAccess PolicyEncrypt&SecureWorkflow,Audits&Reporting 2023 Privacera

3、.Confidential.All Rights Reserved.Governance Challenges at EnterprisesProliferating regulationsIncreasing technology diversityExploding data volumes and access demandsPrivacySecurityGovernanceR&DS&MCustomerSuccessOperationsFinance 2023 Privacera.Confidential.All Rights Reserved.Unity Catalog-Provide

4、s Foundation Capabilities Centralizes Metastore and User Management Single place to manage policies for all catalogs and workspaces Support for fine grained access controls like table,row-level and dynamic column masking Abstraction over object store paths6Row Level Security and Column Level Masking

5、Assign reusable filter to tableSpecify filter predicatesTest for group membershipOnly show specific rowsProvide differential fine grained access to file based datasets and foreign tablesCREATE FUNCTION us_filter(region STRING)RETURN IF(IS_MEMBER(admin),true,region=“US”);ALTER TABLE sales SET ROW FIL

6、TER us_filter ON region;CREATE FUNCTION (.)RETURN filter clause whose output must be a booleanAssign reusable mask to columnSpecify mask or function to maskTest for group membershipMask or redact sensitive columnsCREATE FUNCTION ssn_mask(ssn STRING)RETURN IF(IS_MEMBER(admin),ssn,