AWS glue high security documentation change

Service: glue · 2025-08-13 · Security-related high

File: glue/latest/webapi/API_PIIDetection.md

Summary

Expanded PII detection capabilities with new parameters for detection sensitivity, redaction settings, and pattern matching

Security assessment

Adds granular controls for PII handling including redaction patterns and sensitivity levels, directly improving data protection capabilities. The 'RedactText' and sensitivity parameters specifically address data security requirements.

Diff

diff --git a/glue/latest/webapi/API_PIIDetection.md b/glue/latest/webapi/API_PIIDetection.md
index 727f1ba7a..98c556c26 100644
--- a//glue/latest/webapi/API_PIIDetection.md
+++ b//glue/latest/webapi/API_PIIDetection.md
@@ -57 +57 @@ Type: String
-Valid Values: `RowAudit | RowMasking | ColumnAudit | ColumnMasking`
+Valid Values: `RowAudit | RowHashing | RowMasking | RowPartialMasking | ColumnAudit | ColumnHashing | ColumnMasking`
@@ -60,0 +61,22 @@ Required: Yes
+**DetectionParameters**
+    
+
+Additional parameters for configuring PII detection behavior and sensitivity settings.
+
+Type: String
+
+Pattern: `([\u0009\u000B\u000C\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF])*`
+
+Required: No
+
+**DetectionSensitivity**
+    
+
+The sensitivity level for PII detection. Higher sensitivity levels detect more potential PII but may result in more false positives.
+
+Type: String
+
+Pattern: `([\u0009\u000B\u000C\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF])*`
+
+Required: No
+
@@ -73,0 +96,33 @@ Required: No
+**MatchPattern**
+    
+
+A regular expression pattern used to identify additional PII content beyond the standard detection algorithms.
+
+Type: String
+
+Pattern: `([\u0009\u000B\u000C\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF])*`
+
+Required: No
+
+**NumLeftCharsToExclude**
+    
+
+The number of characters to exclude from redaction on the left side of detected PII content. This allows preserving context around the sensitive data.
+
+Type: Integer
+
+Valid Range: Minimum value of 0.
+
+Required: No
+
+**NumRightCharsToExclude**
+    
+
+The number of characters to exclude from redaction on the right side of detected PII content. This allows preserving context around the sensitive data.
+
+Type: Integer
+
+Valid Range: Minimum value of 0.
+
+Required: No
+
@@ -84,0 +140,22 @@ Required: No
+**RedactChar**
+    
+
+The character used to replace detected PII content when redaction is enabled. The default redaction character is `*`.
+
+Type: String
+
+Pattern: `([\u0009\u000B\u000C\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF])*`
+
+Required: No
+
+**RedactText**
+    
+
+Specifies whether to redact the detected PII text. When set to `true`, PII content is replaced with redaction characters.
+
+Type: String
+
+Pattern: `([\u0009\u000B\u000C\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF])*`
+
+Required: No
+