Manage desensitization tasks

Prerequisites

SDDP is authorized to access your MaxCompute projects, RDS databases, or OSS buckets. For more information, see Authorization configuration.

Procedure

1. Log on to the SDDP console.
2. Create a desensitization task.

   In the left-side navigation pane, choose Sensitive Data Desensitization > Static Desensitization. On the page that appears, click Add Desensitization Task in the upper-right corner to create a custom desensitization task.

   
   1. Enter basic task information, including the task name and remarks, and click Next.
      Note You can specify a custom task name.
      
   2. Configure the data to be desensitized and click Next.

      Parameter	Description
      Source Product	The Alibaba Cloud service that contains the sensitive data to be desensitized. Note Currently, you can only desensitize sensitive data identified in MaxCompute projects and RDS databases. You cannot desensitize sensitive data identified in OSS buckets.
      Project	Required. The project or database that contains the table for storing the sensitive data to be desensitized.
      Table Name	Required. The table that stores the sensitive data to be desensitized.
      Source Partition	Optional. The partition that contains the sensitive data to be desensitized. For more information about specify a partition, see Specify a partition. Note This parameter is only available when you set the Source Product parameter to MaxCompute. Partition: You can configure partitions when creating a MaxCompute table. Partitions define different logical divisions of a table to help you efficiently query specific content. Note If you leave this parameter unspecified, SDDP desensitizes sensitive data in all partitions of the table.
      Sample SQL	Optional. The SQL statement that specifies the data to be desensitized. Note This parameter is only available when you set the Source Product parameter to RDS.

   3. Configure the desensitization algorithm and click Next.

      In the field list, turn on the Desensitization switch for each field that needs to be desensitized and select a desensitization algorithm as needed. For more information about the desensitization algorithms, see Configure desensitization algorithms.

      
      Note A field is desensitized only after the Desensitization switch is turned on for this field.
   4. Specify the destination location for storing the desensitized data and click Next.
   5. Configure the processing logic.

      Parameter	Description
      Select Trigger Method	The mode in which the desensitization task is run. Valid values: Manual Only: You must manually run the desensitization task on the Static Desensitization page. Scheduled Only: The desensitization task is automatically run at the specified time hourly, daily, or monthly. Manual + Scheduled: You can manually run the desensitization task. The desensitization task is also automatically run at the specified time hourly, daily, or monthly.
      Table Name Conflict Resolution	The handling method if a table exists with the same name as the specified destination table. Valid values: Delete the target table and create a new table with the same name Insert new data to the target table: We recommend that you select this option.
      Row Conflict Resolution	Keep conflicting rows in the target table and discard the new data: We recommend that you select this option. Delete conflicting rows in the target table and insert the new data

   6. Click Submit to create the desensitization task.
3. Run the desensitization task.
   After the desensitization task is created, it appears in the desensitization task list. Find the desensitization task, turn on the switch, and click Start in the Actions column to run the desensitization task.

   You can modify or delete a desensitization task after it is created. A running desensitization task cannot be deleted.

4. In the Task Execution Query section, view the running progress and status of the desensitization task.

   You can know whether the desensitization task is run successfully by checking the value in the Status column. For more information about the failure causes, see Troubleshooting.

   After a desensitization task is started, you must click Global Task Execution Search to update the status of the desensitization task. If you do not click the button, the desensitization task may not be found in the Task Execution Query section.

   

Specify a partition

Query desensitization tasks

On the Static Desensitization page, you can query desensitization tasks. In the Desensitization Tasks section, click the ID of a desensitization task in the Task ID column to view the task details.

To modify a desensitization task, copy the task ID, paste it in the search bar in the Desensitization Tasks section, and then click Desensitization Task Search. The target desensitization task appears. Click Modify in the Actions column to modify the desensitization task.

Troubleshooting