Oracle Database 12c Security Cookbook

Creating transparent sensitive data protection policy

This step defines the way you want to protect sensitive data. You can use Data Redaction or VPD settings for your TSDP policy. In this recipe, you'll use regular expression redaction to protect previously defined sensitive data.

Getting ready

To complete this recipe, you'll need an existing user who has the execute privilege on the dbms_tsdp_protect package (for example, c##zoran).

How to do it...

1. Connect to the database (for example, pdb1) as a user who has appropriate privileges (for example, c##zoran user):

   $ sqlplus c##zoran@pdb1
   

2. Create TSDP policy using Data Redaction.
   

   Figure 7 - TSDP policy ...