Generally Available: Dynamic data masking with Azure Cosmos DB

Dynamic data masking (DDM) is a server-side, policy-based security feature in Azure Cosmos DB that helps your organization protect sensitive data from unauthorized access. DDM dynamically masks data for nonprivileged users, ensuring that sensitive information is redacted in real time before being presented to applications, while the original data remains unchanged in the database. 

DDM helps your organization meet security, compliance, and regulatory requirements by limiting exposure of sensitive data such as Personally Identifiable Information (PII) and Protected Health Information (PHI). 

Learn more.