ColumnMask

Column masking or derivation rule. Access policies and pipeline inputs accept schema-preserving masks with no source or expression; views may reference backing columns and use every ColumnMaskType value.

typeColumnMaskType (string)필수

Unified column mask / derivation vocabulary.

Schema-preserving value transforms are valid in every consumer. The derivation / aggregation entries (expr, sum, count, avg, min, max) change row/column shape and are only valid in View — AccessControlPolicy and PipelineData declare their allowed subset locally and reject the rest.

Possible values: [null, redact, partial_start, partial_end, hash, passthrough, expr, sum, count, avg, min, max]

source object

Backing-column reference used by views, in alias.column form. If null, the column-mask key identifies the backing column. Access policies and pipeline inputs require null.

하나 이상(anyOf)

• string
• null

string

expression object

SQL expression used by views when type is expr. Other mask types, access policies, and pipeline inputs require null.

하나 이상(anyOf)

• string
• null

string

value object

Replacement string for 'redact' type (default '****')

하나 이상(anyOf)

• string
• null

string

length object

Number of chars to reveal for 'partial_start' / 'partial_end'

하나 이상(anyOf)

• integer
• null

integer

algorithm object

Hash algorithm for 'hash' type ('sha256' or 'md5')

하나 이상(anyOf)

• string
• null

string

ColumnMask

{
  "type": "null",
  "source": "string",
  "expression": "string",
  "value": "string",
  "length": 0,
  "algorithm": "string"
}