AWS LEX -Encryption/decryption user's input

0

Hi Team I am getting user input from Lex bot a credit card number which i dnt want to expose in logs or in lambda, i need to encrypt the input in transit itself. How to encrypt aws lex user input in transit itself and send to lambda function. Could you please suggest me with any samples, or this approach is possible in lex v2.

Thanks RC

2 個答案
1
已接受的答案

Amazon Lex provides Slot Obfuscation where Amazon Lex enables you to obfuscate, or hide, the contents of slots so that the content is not visible. To protect sensitive data captured as slot values, you can enable slot obfuscation to mask those values in conversation logs. See Slot Obfuscation.

Also, for encryption, Lex encrypts the data at rest as well as in transit.

AWS
Taka_M
已回答 2 年前
profile pictureAWS
專家
已審閱 1 年前
0

Hi , Thanks for your answer, I tried it with Slot Obfuscation approach , it was working with sensitive data from slot values as masked in conversional logs, Is there any way to mask the cloudwatch logs same like conversation logs when lambda is invoked from same Intent (bot).

已回答 2 年前
  • The feature to redact sensitive information from CloudWatch logs does not exist today. There is a feature request internally within AWS for the same. You can write the same logs with redacted information to another log stream or log group and delete the original one. However, that can cost for CW logs collect, data transfer, and data store (and lambda or other services used to run the code if that's one of the aws services) Amazon CloudWatch pricing. This is a third-party article but I see a sample solution from here https://medium.com/@likhita507/editing-cloud-watch-logs-without-using-log-streams-bdbe95662967. Please use it at your discretion.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南