Azure Synapse SQL Table Security
Question
Fuller, as a Data engineer, works for a Healthcare organization named ContosoHealthOnline.com He's working on Azure Synapse SQL tables which contain sensitive patient records required to be accessible only to doctors and healthcare staff.
The other department members, like billing and hospital operations, should not be able to access the tables with sensitive attributes and records.
Which kind of security should Fuller impose on SQL tables of the Azure Synapse analytics platform?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer: A.
The security measure that Fuller should impose on the SQL tables of Azure Synapse analytics platform, which contain sensitive patient records, is Row level security (RLS).
Row level security (RLS) is a security feature provided by Azure Synapse that enables the database administrator to control the access of different users or groups to specific rows in a database table. RLS helps to enforce fine-grained access control to specific rows of data, based on a set of pre-defined rules.
In this case, RLS can be used to restrict access to sensitive patient records only to authorized healthcare staff, and prevent other department members like billing and hospital operations from accessing the tables with sensitive attributes and records.
Column level security is used to restrict access to specific columns in a table, which is not applicable in this scenario since the entire table contains sensitive data that needs to be restricted.
Data Classification and Discovery is a feature that helps classify sensitive data within a database, but it doesn't offer any access control.
Dynamic data masking is a security feature that masks sensitive data in a column from unauthorized users, which may not be ideal in this scenario as the sensitive data needs to be accessed by authorized healthcare staff.
Therefore, Row level security (RLS) is the most suitable security measure that Fuller should implement to enforce fine-grained access control to sensitive patient records.
