AWS LEX -Encryption/decryption user's input

0

Hi Team I am getting user input from Lex bot a credit card number which i dnt want to expose in logs or in lambda, i need to encrypt the input in transit itself. How to encrypt aws lex user input in transit itself and send to lambda function. Could you please suggest me with any samples, or this approach is possible in lex v2.

Thanks RC

2 Risposte
1
Risposta accettata

Amazon Lex provides Slot Obfuscation where Amazon Lex enables you to obfuscate, or hide, the contents of slots so that the content is not visible. To protect sensitive data captured as slot values, you can enable slot obfuscation to mask those values in conversation logs. See Slot Obfuscation.

Also, for encryption, Lex encrypts the data at rest as well as in transit.

AWS
Taka_M
con risposta 2 anni fa
profile pictureAWS
ESPERTO
verificato un anno fa
0

Hi , Thanks for your answer, I tried it with Slot Obfuscation approach , it was working with sensitive data from slot values as masked in conversional logs, Is there any way to mask the cloudwatch logs same like conversation logs when lambda is invoked from same Intent (bot).

con risposta 2 anni fa
  • The feature to redact sensitive information from CloudWatch logs does not exist today. There is a feature request internally within AWS for the same. You can write the same logs with redacted information to another log stream or log group and delete the original one. However, that can cost for CW logs collect, data transfer, and data store (and lambda or other services used to run the code if that's one of the aws services) Amazon CloudWatch pricing. This is a third-party article but I see a sample solution from here https://medium.com/@likhita507/editing-cloud-watch-logs-without-using-log-streams-bdbe95662967. Please use it at your discretion.

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande