DynamoDB streaming to s3 with lambda

There is no service-side support for dropping/hiding a single attribute from the GetRecords response. You'll have to implement this kind of filtering in your application.